Note: As our world comes together to slow the spread of COVID-19 pandemic, the Zoom Support Center has continued to operate 24x7 globally to support you. Please see the updated Support Guidelines during these unprecedented times.



SSO-based calendar and contacts integration for Office 365 Follow

Overview

Admins can use their Single Sign On (SSO) configuration to enable and authorize the calendar and contacts integration for all users, by collecting access tokens for Outlook. End users will then be prompted to authorize this integration and have the calendar and contact details automatically populated into their Zoom desktop client. The calendar events are shown in the Zoom meeting list and the contact list is shown in the Zoom contact directory.

To configure this integration, the account must have Sign Sign On configured and their identity provider must be federated with Azure Active Directory.

Note: See the account-level settings in the web portal to learn more about calendar and contacts integration.

This article covers:

Prerequisites

Enabling user prompt for integrating Office 365

  1. Sign in to the Zoom web portal.
  2. In the navigation panel, click Account Management then Account Settings.
  3. In the Contacts and Calendar section, turn on Ask users to integrate Office 365 calendar when they sign in.
    When users sign in to Zoom using using their Office 365 account (SSO), Zoom will redirect users to the Offce 365 OAuth URL to integrate their calendar.
  4. Select one of these options:
  • Ask users the first time they sign in:  Zoom will only redirect users to the Office 365 OAuth URL they sign in using SSO for the first. If the users don't accept the OAuth request or an error occurs, users can only set up calendar and contacts integration manually.
  • Ask users every time they sign in until they integrate the calendars: Zoom will redirect users to the Office 365 OAuth URL every time users sign in using SSO and don't have calendar and contacts integration set up.

Troubleshooting

User needs admin approval

One known issue with the calendar and contacts integration is users receiving an error Need admin approval at the time of sign in. This occurs because the user's Office 365 admin account has disabled the option Users can consent to apps accessing company data on their behalf.

Solution 1

In Azure, admins can re-enable the option, Users can consent to apps accessing company data on their behalf. This will take about 30 minutes to propagate. 

Solution 2

Admin:

  1. Sign in to the Zoom web portal.
  2. In the navigation panel, click Account Management then Account Settings.
  3. Toggle the option Office 365 users can consent to enterprise applications accessing company data on their behalf to off (gray).

User:

  1. Sign in to the Zoom web portal.
  2. Click Profile.
  3. In the Calendar and Contact Integration section, click Connect to Calendar and Contact Service.
  4. Select Office 365.
  5. Below Choose a way to authorize the calendar, select Authorize with OAuth 2.0.
  6. At the bottom of the page, check the option I'm the admin and I'm consenting on behalf of the company
  7. Click Authorize and login to Microsoft online with the Office 365 Admin account. 

Hybrid environment

If you are using a Office 365 hybrid environment and your Exchange on-prem server is earlier than Exchange 2016 Cumulative Update 3 (CU3), released in September 2016, Office 365 OAuth should authorize using the EWS URL because Microsoft Graph is required. Learn more on the Microsoft support site.

Solution

  1. Set up calendar and contacts integration for Office 365,
  2. Make sure to select Authorize with EWS URL.
  3. Enter your EWS URL, then click Save.

Permission control

Admin can't change permission when configuring calendar and contacts integration for Office 365.

Solution

  1. Set up calendar and contacts integration for Office 365,
  2. Make sure Authorize with EWS URL is not selected.
  3. Change the permissions and click Save.