Microsoft Teams and OneDrive

➤ To configure the server settings, the following fields are required.

• Instance Name
• Description
• Client ID
• Tenant ID
• Client Secret

➤ Setup

1. Sign in to the Azure Active Directory admin center and log in using a personal account (aka
   Microsoft Account) or Work or School Account.
2. Select Azure Active Directory in the left-hand navigation, then select App Registrations under Manage.
3. Select New Registration. On the Register an application page set the values.
   1. Set Name as ‘Java Spring Graph Notification Webhook Sample‘.
   2. Set Supported Account Types to Accounts in this organizational directory only.
   3. Under Redirect URI, set the first drop-down to Web and set the value to
      http://localhost:8080/login/oauth2/code/.
4. On the application overview page, copy the value of the Application (client) ID and save it, you
   will need it in the next step. Choose Register.
5. Navigate to Certificates and Secrets under Manage, then select New Client Secret. Enter a
   value in Description and select one of the options for Expires and select Add.
6. Copy the Value of the new secret before you leave this page. It will never be displayed
   again. Save the value for later use.
7. Navigate to API Permission under Manage > API Permissions > Add a Permission.
8. Make sure that the Microsoft APIs tab is selected, then select Microsoft Graph
9. The following are the delegated client permissions.
   • ChannelMember.Read.All
   • ChannelMember.ReadWrite.All
   • ChannelMessage.Read.All
   • ChannelMessage.Send
   • Chat.Create
   • Chat.ReadWrite
   • ChatMessage.Read
   • ChatMessage.Send
   • Files.Read
   • Files.Read.All
   • Files.Read.Selected
   • Mail.Read
   • Offline_access
   • Openid
   • Profile
   • User.Read
10. The following are the Application Client permissions.
    • ChannelMember.Read.All
    • ChannelMember.ReadWrite.All
    • ChannelMessage.Read.All
    • ChannelMessage.Send
    • Chat.Create
    • Chat.ReadWrite
    • ChatMessage.Read
    • ChatMessage.Send
    • Files.Read
    • Files.Read.All
    • Files.Read.Selected
    • Mail.Read
    • Offline_access
    • Openid
    • Profile
    • User.Read

☛ Note:
To initiate data discovery and scan on a Teams instance, it is essential to obtain protected API access first. To obtain the necessary API access and whitelist, you need to submit a request via the Microsoft Form.