0% found this document useful (0 votes)
310 views10 pages

Microsoft Office 365: Administrator Guide

Download as docx, pdf, or txt
Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1/ 10

Microsoft Office 365

Administrator Guide
 
Contents
Document Change History........................................................................................................... 3
Microsoft Office 365..................................................................................................................... 4
Microsoft Office 365 permissions................................................................................................4
Browser consideration for the Microsoft Office 365 widget..........................................................4
Outbound traffic.......................................................................................................................... 4
Set up integration for the Microsoft Office 365 widget.................................................................5
Register Brightspace Learning Environment with Microsoft Azure.............................................5
Office 365 Mail, Calendar, and SharePoint Verification...................................................6
API Calls......................................................................................................................... 6
Configure Brightspace platform for Microsoft Office 365 Plug-in................................................7
Add the Office 365 Widget to a course........................................................................................8
Add the Office 365 Widget to a home page................................................................................8
User workflows for the Office 365 Widget...................................................................................8
Troubleshooting the Microsoft Office 365 integration..................................................................9
About D2L.................................................................................................................................. 10

2
© 2019 by D2L Corporation. All rights reserved.
Document Change History
This version of the document replaces all previous versions. The following table describes the
most recent changes to this document.
Revision Date Summary of Changes
June 6, 2019 Updated the Microsoft Office 365 topic to include OneNote
in the list of Microsoft services.
January 3, 2019 Updated steps in the Register Brightspace Learning
Environment with Microsoft Azure topic to include more
detailed steps to complete the setup process.
October 4, 2018 Updated steps in the Register Brightspace Learning
Environment with Microsoft Azure topic and included a link
to Microsoft article.
September 6, 2018 Updated the Register Brightspace Learning Environment
with Microsoft Azure topic.
November 2, 2017
Removed references to the
d2l.Tools.Office365.ClientDomain configuration variable.
November 5, 2015 Added information about outbound connections and
configuring a proxy server. Removed the requirement that
the configuration variables OrgHasSSLEnabledInternal
and OrgHasSSLEnabled have the same value since this is
no longer the case. Removed the statement that
d2l.Tools.Office365.ClientDomain is not available in
Brightspace Learning Environment by default since it is
now available in Brightspace Learning Environment by
default.
Microsoft Office 365
Microsoft Office 365 provides institutions with a collection of enterprise-grade communication
and productivity services. Depending on the license chosen, these services may include
Exchange Online, SharePoint Online, OneNote, Lync Online, and Office Professional Plus.
Through their integration solutions, Brightspace Learning Environment and Microsoft Office 365
services (Email, Calendar, and more) improve how students and teachers interact online.
Institutions can choose any of the integration solutions appropriate to their users.

Microsoft Office 365 permissions


Setting Allow users to Users will see Also Applicable
required org unit
types

Can view View and access the The Microsoft Office 365 None Any
Microsoft Office Microsoft Office 365 system widget on their course
365 Widget system widget homepage

Browser consideration for the Microsoft Office 365 widget


User sessions in the Microsoft Office 365 widget are saved on your Brightspace account and are
not tied to your browser session. This avoids having to log in to Office 365 each time that you
access Brightspace.
When logging in from your browser, the first email address that you use is saved in your
cookies. Each subsequent login from your browser session uses this email address. It might be
necessary to clear your cache or reset your browser session to log in to the widget using a
different email address.

Outbound traffic
If your institution's firewall configuration does not allow outbound traffic, you must use one of the
methods below to establish an outgoing HTTPS connection to these URLs:

 https://api.office.com/discovery/me/FirstSignIn
 https://login.windows.net/common/oauth2/authorize
 https://login.windows.net/common/oauth2/token
 https://api.office.com/discovery/me/Services
 https://outlook.office365.com/api/v1.0/Me/Folders('Inbox')/Messages

4
© 2019 by D2L Corporation. All rights reserved.
 https://outlook.office365.com/api/v1.0/Me/Events
 https://<tenant>-my.sharepoint.com/personal/<site-path>/_api/files

Use one of these methods to permit HTTPS connections to the URLs listed above:

 Add a firewall rule to allow outbound connections (port 80 and port 443) from all web and
scalable servers to the URLs listed above.
 Configure a proxy server on the network that allows outbound connections to the URLs
listed above by setting the following configuration variables:
 d2l.System.Infrastructure.ProxyAddress - The address of the proxy server. It
normally takes the form http://myproxy:8080/ or https://myproxy:8080/ where
myproxy is the host name or IP address and 8080 is the port.
 d2l.System.Infrastructure.ProxyBypassAddresses - The addresses or address
patterns that should not go through the proxy server. Address patterns take the form
scheme://hostname:port/path where scheme is either http or https; hostname can
be set as a * wildcard; port can be a specific number or a * wildcard to apply to all
port numbers; and path is optional and can also contain a * wildcard.

Set up integration for the Microsoft Office 365 widget


To set up your integration of the Microsoft Office 365 widget in Brightspace Learning
Environment, you must complete several tasks, which are explained further in the following
sections:

1. Register Brightspace Learning Environment with Microsoft Azure.


2. Enable Microsoft Office 365 in Brightspace Learning Environment.
3. Configure Brightspace Learning Environment for the Microsoft Office 365 Plug-in.
4. Add the widget to a course or home page.

Register Brightspace Learning Environment with Microsoft Azure


To access secured Microsoft Office 365 services in Brightspace Learning Environment, you
need to grant your instance rights to access those services. This is done by registering
Brightspace Learning Environment in a Microsoft Azure tenant and then configuring Brightspace
Learning Environment with the resulting Client (Application) ID and Key. D2L recommends
creating single-tenant instances instead of multi-tenant instances.
Before you begin, ensure that you have your Azure AD authentication information. This
authentication information is a user name and password combination.
Refer to Integrating applications with Azure Active Directory for detailed information.
To grant your instance rights to access Microsoft Office 365 services, follow the steps outlined
below. Note that this information is intended for those who understand how to navigate Azure
cloud (Admin). Contact your System Administrator if you are unsure of how to follow these
steps:

5
© 2019 by D2L Corporation. All rights reserved.
1. Go to the Azure Portal and log in with your Office 365 credentials.
2. Using the left pane, select More Services > Azure Active Directory.
3. Select App Registrations.
4. Select New Application Registration, and set an appropriate display name.
5. Set the Application type to WebApp / API.
6. Set the Sign-on URL to your Brightspace Learning Environment URL.
7. Save the information, and make note of the ApplicationId that is generated, (this is
required later in the process).
8. From the application base page, click Settings, and select Required Permissions.
9. Add the Office 365 SharePoint Online (Microsoft.SharePoint) API, and add the
delegated permission Read user files.
10. Add the Microsoft Graph API, and add the delegated permissions Read user calendars,
and Read user mail.
11. Select Microsoft Graph, click Grant Permissions, and click Yes.
12. Select Office 365 SharePoint Online, click Grant Permissions, and click Yes.
13. Select Windows Azure Active Directory, click Grant Permissions, and click Yes.
14. From the application base page, select Reply URLs.
15. Add /d2l/im/office365/authentication/authenticatereply to the end of your Brightspace
Learning Environment URL.
16. From the application base page, select Keys.
17. Add an appropriate description, and pick a suitable expiry date.
18. Click Save, and observe the Key that displays under Value.
19. Copy the Key (it is not visible once this process is complete, and is required in the next
steps).
20. Log in to Brightspace Learning Environment, select Admin Tools, and click Config
Variable Browser.
21. Navigate to the d2l.Tools.Office365.ClientId configuration variable, and add The
ApplicationID from step 8 as the Org Value.
22. Navigate to the d2l.Tools.Office365.ClientSecret configuration variable, and enter the
Key you copied in step 20 as the Org Value.

Office 365 Mail, Calendar, and SharePoint Verification


After the Azure tenant is configured, the widget will only work if all of the services it is accessing
are configured. The widget accesses Office 365 Mail, Calendar, and SharePoint, which must all
be available when you sign in for the widget to work. User accounts can sometimes take time to
set up these services, so it is important for a user to first verify that they can access them within
Office 365.

API Calls
The Office 365 widget makes client and server-side calls to the Microsoft Office 365 APIs to
authenticate and retrieve user information from a user's email, calendar, and OneDrive account.
Note: These requests are determined by Microsoft and are subject to change if the APIs
change.

6
© 2019 by D2L Corporation. All rights reserved.
Client-side
The requests made on the client-side in the browser are:

 https://api.office.com/discovery/me/FirstSignIn
 https://login.windows.net/common/oauth2/authorize

Server-side
The requests made on the server-side are:

 https://login.windows.net/common/oauth2/token
 https://api.office.com/discovery/me/Services
 https://outlook.office365.com/api/v1.0/Me/Folders('Inbox')/Messages
 https://outlook.office365.com/api/v1.0/Me/Events
 https://<tenant>-my.sharepoint.com/personal/<site-path>/_api/files

The last URL for the SharePoint calls is returned to the Brightspace platform from the previous
Microsoft calls. Each organization's tenant may be different, and each user's site path may be
different. See https://msdn.microsoft.com/en-us/office/office365/api/files-rest-operations for more
information.

Configure Brightspace platform for Microsoft Office 365 Plug-in


In Brightspace Learning Environment, complete the following tasks to integrate with Microsoft
Office 365.

1. Enable the Microsoft Office 365 Plug-in:


a. From the Admin Tools menu on the minibar, click Organization Tools.
b. Locate the Office 365 Plug-in from the list and then click the Availability toggle to
turn it on.
2. Set Role Permissions for each user role that uses the Office 365 Plug-in:
a. From the Admin Tools menu on the minibar, click Roles and Permissions.
b. Browse to the appropriate role and then click the drop-down menu.
c. Select Edit Permissions.
d. In the Filter by Tool drop-down menu, browse to Office365.
e. Click Apply Filter.
f. Click to select the Can View Office 365 Widget permission.
g. Click Save.
h. Repeat the process to set role permissions for additional user roles.
3. Add the Client ID and Client Key to the configuration variable browser:
a. From the Admin Tools menu on the minibar, click Config Variable Browser.
b. In the d2l.Tools.Office365.ClientId variable, select Org Value.
c. Enter the Client ID from the application registered on your Azure tenant into the text
box and then click Save.
d. In the d2lTools.Office365.ClientSecret variable, select Org Value.

7
© 2019 by D2L Corporation. All rights reserved.
e. Enter the Client Key from the application registered on your Azure tenant into both
fields and click Save.

Add the Office 365 Widget to a course


To add the Office 365 widget to a course

1. Open the course.


2. Click Edit.
3. In the Widgets section, click Add Widgets > System Widgets.
4. Select Office 365 and then click Add.
5. Click Save.

Add the Office 365 Widget to a home page


To add the widget to your homepage:

1. From the Admin Tools menu on the minibar, click Homepage Management.
2. Select the active homepage.
3. In the selected location, select Add Widgets > System Widgets.
4. Select Office 365 and then click Add.
5. Click Save.

User workflows for the Office 365 Widget


To perform the initial sign in to the Office 365 widget
Use one of the following workflows for initial sign in to the Office 365 widget:
SSO is not set up

1. The user clicks the initial sign-in button in Brightspace Learning Environment.
2. A new tab opens and the user is redirected to a "Sign in" page where the user enters their
email address.
3. After clicking Next, the user is redirected to another "Sign in" page where the user re-
enters their email address and then enters their password.
4. After signing in, the tab closes and the user is redirected to Brightspace Learning
Environment with the widget loaded.

SSO is set up

1. The user clicks the initial sign in button in Brightspace Learning Environment.
2. A new tab opens and user is redirected to a "Sign in" page where the user enters their
email address.

8
© 2019 by D2L Corporation. All rights reserved.
3. After clicking Next, the user is redirected to another "Sign in" page where the user enters
their email address again. After they enter their email address and either tab or click out of
the email field, the page redirects the user to the Identity Provider (IdP) page, according to
the instance configuration.
4. After the user has gone through the IdP process, the tab closes and the user is redirected
to Brightspace Learning Environment with the widget loaded.

Troubleshooting the Microsoft Office 365 integration


Page Not Found
Verify that the URL that you use to access Brightspace Learning Environment is the same URL
that is configured in the following configuration variables: d2l.settings.WebServerName and
d2l.settings.WebServerNameInternal.
Sign in - Application with ID was not found in directory
After configuring the widget, if you proceed through the initial sign in for the widget and then see
the error "Sign In - Sorry, but we're having trouble signing you in. We received a bad request",
view the additional technical information. If the additional technical information includes,
"Application with identifier <id> was not found in directory <id>", then there is an issue with your
Azure tenant. Your App ID URI does not match the domain that your Brightspace Learning
Environment instance is currently on. Verify that the App ID URI matches the URL of your
Brightspace Learning Environment instance in your Azure tenant.
Widget displays "Loading..." when viewing emails
This may be an issue with the cookies in your browser. Microsoft relies on the cookies in your
browser session to verify the account to connect with, even if you type your email address at the
beginning of the authentication process. If you are using multiple work accounts, this may affect
authentication. Open a private browser session, log in to Brightspace Learning Environment,
and then try to view emails. If you can view emails in a private browser session, delete your
cookies to solve the problem in your regular browser session.
After authenticating with Office 365 and being redirected, the widget does not sign
in
If you sign in through the widget, go through the Microsoft authentication process, and then get
redirected back to the LMS but the widget is still not signed in, the account may not be set up
properly with the Office 365 services. One of Mail, Calendar, or OneDrive is not set up in the
account that is being used to log in. Try logging into Office 365 and accessing your Mail,
Calendar, and OneDrive account. After you have confirmed that you can view everything, try
logging into the widget again.
Additional information on configuring Microsoft Azure
For more information on configuring Microsoft Azure, refer to the following links:

 http://azure.microsoft.com/en-us/get-started/
 http://azure.microsoft.com/en-us/support/trust-center/

9
© 2019 by D2L Corporation. All rights reserved.
About D2L
A global leader in EdTech, D2L is the creator of Brightspace, the world’s first integrated learning
platform.
The company partners with thought-leading organizations to improve learning through data-
driven technology that helps deliver a personalized experience to every learner, regardless of
geography or ability. D2L’s open and extensible platform is used by more than 1,100 clients and
almost 15 million individual learners in higher education, K–12, healthcare, government, and the
enterprise sector—including Fortune 1000 companies.
The company has operations in the United States, Canada, Europe, Australia, Brazil, and
Singapore. www.D2L.com
 
Contact Us  
Phone: 1.519.772.0325 (Worldwide)
Toll Free:
1.888.772.0325 (North America)
0.808.234.4235 (United Kingdom and Europe)
0.800.452.069 (New Zealand)
1.800.656.210 (Australia)
0.800.891.4507 (Brazil)
Fax: 1.519.772.0324
Email: [email protected]
Twitter: @Brightspace
Web: www.D2L.com

© 2019 D2L Corporation.


The D2L family of companies includes D2L Corporation, D2L Ltd, D2L Australia Pty Ltd, D2L
Europe Ltd, D2L Asia Pte Ltd, and D2L Brasil Soluções de Tecnologia para Educação Ltda.
Brightspace, D2L, and other marks ("D2L marks") are trademarks of D2L Corporation, registered
in the U.S. and other countries. Please visit d2l.com/trademarks for a list of other D2L marks.

10
© 2019 by D2L Corporation. All rights reserved.

You might also like