---
sourceDocument: Xanadu Employee Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/employee-service-management

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Employee Service Management

ft:clusterId :

    - emplsm

bundleId :

    - emplsm

workflow :

    - Employee


---

# Configure Microsoft Azure in normal mode

# Configure Microsoft Azure in normal mode {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Set up a normal mode authentication with Microsoft Azure to connect Microsoft Outlook with Workplace Calendar Synchronization.

## Before you begin

Role required: Exchange administrator

## About this task

Add normal mode permissions so that you can synchronize Workplace Calendar Synchronization with Microsoft Exchange Online via GraphAPI.

## Procedure

1. Log in to the Microsoft Azure portal.
2. Navigate to Azure ServicesAzure Active DirectoryManageApp registrations.
3. **Optional:** If you do not have an app registration, select New registration.
   1. On the form, enter the Name of the registration.
   2. Select the Supported account types of your choice.
   3. **Optional:** Specify the Redirect URL.  
      Specify the following details:
      1. Select the platform as Web.
      2. Enter the URL in the following format: https://\<instance-Name\>.service-now.com/oauth_redirect.do
      {#authenticate-mxexchange-with-azure__ol_gvm_znn_p5b}
   {#authenticate-mxexchange-with-azure__substeps_ij5_rnn_p5b}
4. If you already have an app registration, select the app registration.
   1. Navigate to ManageAuthentication.
   2. Navigate to Add a platformWeb applicationsWeb.
   3. On the Configure Web form, fill the fields.  
      {#authenticate-mxexchange-with-azure__table_qpy_xfk_v4b__entry__2}

      | Field | Description |
      |-|-|
      | Redirect URL | Enter a URL in the format: https://\[instance\].service-now.com/oauth_redirect.do |
      | Implicit grant | Check Access tokens, and ID tokens |
      [Table 1. Configure web form]

      {#authenticate-mxexchange-with-azure__table_qpy_xfk_v4b}
   4. Select Configure.
   {#authenticate-mxexchange-with-azure__substeps_h15_hkk_v4b}
5. Add a client secret.
   1. Navigate to ManageCertificates and secrets.
   2. In the Description field, enter a short description about the secret.
   3. Under Expires, select an expiry.
   4. Select Add.
   5. After adding, in the Client secrets section, copy the value by selecting Copy to clipboard.
6. Add a permission.
   1. Navigate to ManageAPI permissions.
   2. Select Add a permission.
   3. Select Microsoft Graph.
   4. Select Application permissions.
   5. Under Calendars, select Calendars.ReadWrite.
   6. Select Add permissions.
   7. On the Configured permissions screen, select Grant admin consent for ServiceNow.

## Result

The Microsoft Exchange Online is set up with Microsoft Azure.

## What to do next

Configure resources Microsoft Exchange Online in the calendar. For more information, refer to <https://learn.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-resource-mailboxes>.

[Create a connection with Microsoft Exchange Online spoke](https://www.servicenow.com/docs/ZTT6R3ZvW8UW6JzwEfX8pg "Connect to the Microsoft Exchange Online spoke by creating a connection.")

[Set up OAuth connection with Microsoft Exchange Online](https://www.servicenow.com/docs/1eAqEyYgh4bE6NVhdhX6VA "Register your Microsoft Exchange Online with ServiceNow instance for OAuth authorization.")
**Previous topic:** [Create a normal mode connection with Microsoft Exchange Online](https://www.servicenow.com/docs/tRV7zAWEYzP7SF~ArvhBFg "Perform the following steps to establish a normal mode connection with Microsoft Exchange Online.")  
**Next topic:** [Create a connection with Microsoft Exchange Online spoke](https://www.servicenow.com/docs/ZTT6R3ZvW8UW6JzwEfX8pg "Connect to the Microsoft Exchange Online spoke by creating a connection.")

*[\>]: and then