You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Configure the Exchange Online App Service

As a final prerequisite step, you need to apply the configuration settings listed in the below table to the Exchange Online app service.

Application Setting Name

Description

Application Setting Name

Description

VaultUrl

Specifies the URL to the Azure Vault where the Private Key Certificate resides, i.e., https://eiddoc-key-vault.vault.azure.net/

SPCertificateName

Specifies the name of the Private Key Certificate in the Azure Vault, i.e., EXOAuth

SPAppID

Specifies the Application (client) ID of the service principal associated with the above certificate, i.e., 3a441884-4b7a-42e2-bb2b-ef5ce8378002

EXOrganization

Specifies the .onmicrosoft.com domain for the exchange organization, i.e., mycontractors.onmicrosoft.com

WEBSITE_LOAD_USER_PROFILE

The value of this setting must be set to 1.

Configure the app service

  1. Navigate to the Exchange Online App Service you created earlier.

  2. On the navbar for the App Service, under Settings, click Configuration.

  3. Under Application settings, click New application setting.

     

  4. In the Add/Edit application setting pane, do the following to add the first setting:

    1. Name – Enter VaultUrl.

    2. Value – Enter the URL to the Azure key vault where the private key certificate resides.

    3. Click OK.

       

  5. Repeat step 4 above for each of the following settings:

    • SPCertificateName – Set the value to the name of the private key certificate in the Azure key vault

    • SPAppID – Set the value to the Application (client) ID of the service principal associated with the above certificate

    • EXOrganization – Set the value to the the .onmicrosoft.com domain for the exchange organization

    • WEBSITE_LOAD_USER_PROFILE – Set the value to 1

  6. After adding the new settings, click Save.

     

  7. Click Continue to save the changes.



Next Steps

Configure the Azure AD App Service