# Set up Connector

#### Setting up the connection

**1. Register app**

Log in at [https://entra.microsoft.com](https://entra.microsoft.com).

Now click on “App registrations”.

![Ein Bild, das Text, Screenshot, Software, Zahl enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/05qILszEjjTtLycb-k5ylo5au3ftaxlau-embedded-image-h7kxs8cl.png)

Then click on “All applications”.

![Ein Bild, das Text, Screenshot, Reihe, Schrift enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/YMY0hzbKPGOCbhvU-69wtl3zbo14vcjl4-embedded-image-yfeyu3rd.png)

Now create a new registration by clicking on “New registration” at the top.

![Ein Bild, das Text, Schrift, Screenshot, Reihe enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/MsReCfowE7JjMawQ-vnjwkveg3dvc01xr-embedded-image-qo51zzco.png)

1. Under “Name”: enter “DeDeSales Exchange Connector”.
2. Select the supported account types according to the environment. If there is only one instance: select “Accounts in this organisational directory only”.
3. Select redirect URL and enter “https://login.microsoftonline.com/common/oauth2/nativeclient”.
4. Click on “Register”.
 

![i4wW1yPbAhAc7lUl-embedded-image-ogn0cn4r.png](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/na2KbcwIEpNsxWeB-i4ww1ypbahac7lul-embedded-image-ogn0cn4r.png)

Open the newly registered app by going again to “Azure Active Directory” > “App registrations” and then clicking on “DeDeSales Exchange Connector”.

![Ein Bild, das Text, Screenshot, Schrift, Reihe enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/pnALxvFUJNQ2ksou-eeqncwtmufzun81w-embedded-image-ytbxsuxl.png)

1. Provide us with the Application ID.
2. Provide us with the Directory ID.
 

![jIfawHAM96I3MMmR-embedded-image-3g080sw1.png](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/UFYVcBV5rJ9cmRoD-jifawham96i3mmmr-embedded-image-3g080sw1.png)

Enter “DeDeSales Exchange Connector” under Description.

Select a Period under Valid until.

**Attention!** Before expiry, a new key must be created and communicated to us, otherwise communication will no longer be possible.

![Ein Bild, das Text, Screenshot, Schrift, Reihe enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/qrlgFCUdRyxDYuBG-adi8xitabzadozho-embedded-image-v0ysut3y.png)

Now click on Add.

Now copy the “Value” by clicking on the copy icon behind the characters.

**Attention!** This is only possible now. If you leave the page, the secret key must be created again.

Provide us with the secret key.

Click on “API permissions”.

![Ein Bild, das Text, Screenshot, Schrift enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/fEuJblmSpgEkyqNE-fxexbvfu9alrqhvr-embedded-image-qqtrzdwt.png)

Click on “Add a permission”.

![Ein Bild, das Text, Schrift, Screenshot, Reihe enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/VLpIsGDQJ2sjrTBC-kjyvxa6szqcnd0sz-embedded-image-rjidsdih.png)

Select “APIs my organisation uses”.

Then:

1. Search for and click on “Office 365 Exchange Online”.
2. Now select “Application permissions”.
 

![ANcFZZlRzFYpT8QC-embedded-image-3sgpfffa.png](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/A9FPBiEkzeeraF1l-ancfzzlrzfypt8qc-embedded-image-3sgpfffa.png)

Under “Other permissions”, select “full\_access\_as\_app”.

Click on “Add permissions”.

![Ein Bild, das Text, Screenshot, Software, Webseite enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/bRbNELlbWXK0j5Bf-hxo0bndsizba9ah8-embedded-image-pb8ksbhb.png)

Click on “Grant admin consent for …”.

![Ein Bild, das Text, Schrift, Reihe, Screenshot enthält.  KI-generierte Inhalte können fehlerhaft sein.](https://en.wiki.dedesales.de/uploads/images/gallery/2026-08/hzhQgL19zye3yEnU-n17eqlhlasozer38-embedded-image-e8tyjjpg.png)

  
Ensure that you send us the following information by different means, multiple e-mails, secure upload, etc.:

1. Application ID
2. Directory ID
3. Value from Secret client key in “Certificates & secrets”
 

With this data, full access to the Exchange data has now been granted. The next section explains how to restrict access to specific user accounts.

**2. Restrict access to mailboxes**

Create a new mail-enabled security group or use an existing one.

Now create a policy for application access.

To do this, execute the following command in Powershell, replacing the arguments for AppId (=> corresponds to the Application ID from the app registration) and PolicyScopeGroupId:

“New-ApplicationAccessPolicy -AppId e7e4dbfc-046f-4074-9b3b-2ae8f144f59b -PolicyScopeGroupId EvenUsers@contoso.com -AccessRight RestrictAccess -Description "Restricted access for the DeDeSales Connector."

Attention! If there are changes to user accesses, e.g. due to hiring a new Employee, then the mail-enabled security group must be extended accordingly.

#### Configuration in the DeDeSales backend

1. **Store access data**
 

Store the access data in the DeDeSales backend under Basic configuration > Settings > Exchange access.

1. **Configure Employee user accounts**
 

Under Basic configuration > Employee, enter the E-mail address in the field “Exchange e-mail account” for each Employee. Only for Employees where this field is filled will e-mails be deducted.

Please note that these Employees must also be included in the mail-enabled security group if access has been restricted.