Configuring the GoBright Outlook Add-in for Microsoft Office 365

Due to the recent changes in Outlook (see: Outlook Add-in issue Microsoft marked Exchange Online tokens as legacy), we had to update the installation procedure for the GoBright Outlook Add-in.

GoBright has implemented a solution using Nested App Authentication (NAA).

To make this work, you need to install an enterprise application called GoBright Outlook Add-in in your EntraID.

Start by setting up an integration with Office365 by following the steps from this article: EntraID/AzureAD Enterprise Application Integration (SSO/O365/SCIM/Calendar Integration).

At the bottom of the integration page (Admin Center > Integrations > Your Integration) you will find a section called Outlook add-in.

Firstly, you need to select the authentication mode for the GoBright Add-in:

• Auto (default mode)
• Legacy or
• Nested App Authentication (NAA = the new authentication method)

When selecting Auto, we will attempt to use the Legacy mode first, and if that is not possible, the new NAA mode will be used.

Below this dropdown field, you will find a link that allows you to grant admin consent using your EntraID Global Admin Account for the GoBright Outlook Add-in. And by doing this, the GoBright Outlook Add-in enterprise application will be automatically installed in your EntraID. The following permissions will be granted upon consent:

Microsoft Graph – Calendars.Read.Shared > Optional, to be able to use the add-in with shared calendars (if not desired, see below how to disable afterwards in EntraID)

Microsoft Graph – Calendars.ReadBasic > Required, to store the appointment when using the add-in

Micorsoft Graph – User.Read > Required, to verify the username when using the add-in

Note: The permission Microsoft Graph – Calendars.Read.Shared is automatically added. This permission is needed to allow our app to access delegated and shared calendars that the logged-in user in Outlook has access to. If necessary, you can revoke this permission. However, please note that doing so will limit GoBright’s access to only the logged-in user’s own calendar.

Note: Don’t forget to disable the legacy method when this is enabled. This can be disabled by using this Powershell command:

Set-AuthenticationPolicy –BlockLegacyExchangeTokens -Identity “LegacyExchangeTokens”

To check the status of the LegacyExchangeTokens:

Get-AuthenticationPolicy -AllowLegacyExchangeTokens

The Outlook Add-In can be deployed for a specific user, a group of users or the entire organization through the O365 Admin Center.

Deployment of the GoBright O365 APP/Plugin

To deploy the plugin, first you need to be signed in with an admin account in your M365 environment.

1. You need to go to the Microsoft 365 Admin Center and sign in with the admin account.
2. When you are in the M365 Admin Center, press Settings on the left pane and select Integrated Apps.
3. Press the Get apps button to reach the Microsoft Apps Gallery and search for GoBright.
4. Your results will show two GoBright apps. One called GoBright Addin which is the Addin for Outlook Calendar that we are looking for now and the other one is the GoBright App/Plugin for O365/Teams/Outlook which you can check here.
5. You need to press Get It Now on the one called GoBright Addin and press Get It Now again.
6. In the Users screen, you need to choose for which users you want to deploy the plugin. This can be a test deployment as well for only one user if you want to test it. Or you can immediately select Entire Organization (Most Common) or select specific users or groups.
7. Press Next on the Permission Request Screen.
8. Press Finish Deployment and wait for the Deployment to be completed.
9. Once this is done, the GoBright Addin will be available in Outlook as an Addin when you want to create a booking. However, there might be some synchronization delay, so it might not appear immediately.

The Outlook Plugin can be added as an add-in and installed via an URL.

Login to Outlook

• Go to: https://login.microsoftonline.com
• Login with your credentials
• Open the Outlook App
  

Install the Outlook Web Add-in

• Select Get Add-ins
  
  If you use the classic ribbon, the button looks like this:
  
  If this button doesn’t work for you, you can directly try with this url: https://outlook.office365.com/owa/?path=/options/manageapps)
• Choose My add-ins in the menu on the left.
• Navigate to Custom Add-ins on the bottom.
• Select + Add a custom add-in > Add from URL.
  
• Enter the following URL: https://portal.gobright.cloud/plugin/outlook/gobright-outlook-addin-manifest.xml
• The add-in has now been installed.
• If you use the Outlook desktop app, restart the Outlook desktop app.
• Open the calendar and book a meeting. The GoBright add-in will now be visible in the toolbar.

Supported platforms

Supported authentication methods

• Microsoft Modern Authentication
• SAML2