Manifest Steps for SSO

Important data:

• Application (client) ID – the UUID of the App Registration in Azure. In the documentation we use the value xxxx-xxxx-xxxx as an example, the value for your application is created by Microsoft after the app registration
• PBX URL – the URL of your PBX system, you will receive this from us. In the documentation we use https://callto365-01.voclarion.nl/ as an example
• Tenant URL – the domain of the Microsoft tenant. In the documentation we use example.com

Create new app registration in Azure Portal

• Name: CallTo365 PBX SSO
• Select Accounts in this organizational directory only (Example.com only - Single tenant)
• Redirect URI: select Web, enter the PBX URL of your exchange; for example https://callto365-01.voclarion.nl/
• Click on ‘Register’

Open ‘Overview’ of the created app registration

• Note/copy the Application (client) ID, you will need this later to create the manifest
• Click on the Application ID URI Link
• Edit the Application ID URI, the default value is api://xxxx-xxxx-xxxx
  • Enter the PBX URL (without https://) in the field directly after ‘api://’ but before the Application (client ID) that is filled in by default. In our example this will be: api://callto365-01.voclarion.nl/xxxx-xxxx-xxxx
  • Then press Save
• Then add a Scope
  • Scope Name: Access.as.User
  • Who can consent: Admins and Users
  • Admin consent display name: Access as User
  • Admin consent description: Access as User
  • Click on 'Add Scope'
• Add Authorized client applications
  • Microsoft Teams
    • Client ID; 1fec8e78-bce4-4aaf-ab1b-5451cc387264
    • Select the Authorized Scopes
    • Click 'Add Application'
  • Microsoft Teams Web Client
    • Client ID; 5e3ce6c0-2b1f-4285-8d4b-75ee78787346
    • Select the Authorized Scopes
    • Click ‘Add Application’

Navigate to the “API Permission” page

• Click on ‘Add a Permission’
• Select Microsoft APIs > Microsoft Graph > Delegated permissions
• Under OpenID permissions select;
  • email
  • offline_access
  • openid
  • profile
• Add Permissions
• Click on ‘Grant admin consent for Example.com’

Create Manifest File

• Return to https://www.callto365.com/manifest
• Fill in all the required details
• Enter your Azure Application (client) ID in the field "Azure Application ID"
• Download manifest.zip
• Upload your manifest in your Teams Admin Center
  • Teams Apps > Manage Apps
  • Click on Actions in the top right corner and 'Upload New app'