Microsoft 365
How to connect Microsoft 365 to Nova Admin via OAuth.
Connect Microsoft 365 with an OAuth 2.0 app registration. Nova stores tokens securely and never stores your Microsoft 365 password.
How OAuth connection works
Microsoft 365 uses OAuth 2.0. Nova Admin stores an access/refresh token pair on your behalf — your password is never stored.
Prerequisites
Before clicking Authorize, complete these setup steps:
- Open Microsoft Entra admin center and create an App registration
- Add the redirect URI: {{callbackUrl}}
- Create a client secret and copy its value
- Add the delegated Microsoft Graph permissions listed above
- Grant admin consent if your organization requires it
- Copy the Application (client) ID, client secret, and optional Directory (tenant) ID
Required scopes
offline_access, Mail.ReadWrite, Mail.Send, Calendars.ReadWrite, Files.ReadWrite.All, Sites.ReadWrite.All, Contacts.ReadWrite, User.Read, Chat.ReadWrite, ChannelMessage.Send, Team.ReadBasic.All
Credential fields
| Field | Required | Notes |
|---|---|---|
| Client ID | Yes | Application (client) ID from Microsoft Entra admin center |
| Client Secret | Yes | Secret — stored encrypted. |
| Tenant ID | No | common (or your Microsoft Entra tenant ID) |
Connect
In Nova Admin, go to /agents/integrations, find Microsoft 365, enter the OAuth credentials above, and click Authorize. You will be redirected to Microsoft 365 to grant access, then back to Nova Admin.
Troubleshooting
- Redirect URI mismatch: ensure the OAuth app's redirect URI exactly matches the callback URL shown in the connect dialog.
- Scopes error: verify your OAuth app has the scopes listed above enabled.
- Need help?: refer to the Microsoft 365 OAuth docs.