Requirements

• You need to have SuperAdmin access to LibraCyber.
• Global admin access of the Microsoft 365 tenant
• You need a Graph API connector created in ESG. To create it, please follow the previous Microsoft 365 APIs configuration guide.

Configuration

The configuration process has some steps, please follow them in order they are written. LibraCyber ESG provides easy integration to all Microsoft Outlook users. Both Windows and Mac versions are supported. Basically the add-in permit to interact with your quarantine and report as bad a message; however you can decide to remove some functionality during the creation of the manifest.xml file.

Add API Permission for the Outlook Add-In

Setup Redirect URIs and Front-Channel Logout URL

• Search for the App registrations portal as shown:

• Look up your App registration about LibraCyber ESG and open it

• Now click on Authentication on the left menu:
  • Click Add a platform
  • Choose Single-page application (SPA) option
  • Enter the your https://<YOUR-ESG-HOSTNAME>/outlook-addin-assets/taskpane.html in Redirect URI

• Click Settings
  • Enter the your https://<YOUR-ESG-HOSTNAME>/outlook-addin-assets/taskpane.html in Front-Channel Logout URL

Setup API Permission

• Now click on API permissions on the left menu:
  • Click Add a permission
  • Select Microsoft Graph API
  • Select the following permissions under Application permissions
    • Mail.Read
  • Select the following permissions under Delegate permissions
    • offline_access
    • openid
    • profile
  • Click Done

• Click Grant admin consent and click Yes in the dialog

Apply admin app consent

• Go to: App registration > Overview > scroll down > click “Go to Enterprise applications”

• Go to: Security > Permissions > click “Grant admin consent for ….”

• Accept permission request

Creation of the Manifest.xml file

Retrieve Directory (Tenant) ID

• Search for the App registrations portal as shown:

• Look up your App registration about LibraCyber ESG and open it
• Take note of the Directory (Tenant) ID shown in the top right corner

Enter Directory (Tenant) ID in LibraCyber ESG

• Go in Admin Area > Integrations > Microsoft 365 
• Edit the connector

• Enter the Directory (Tenant) ID in the connector configuration

• Now you can generate the Manifest.xml file by clicking the button to generate it

• Decide which settings to Include or Remove from the add in capabilities

•  
  • "Quarantine" Sidebar: Let's the user see the messages currently stored in his quarantine environment

•  
  • "Report as Bad" button: Let's the user Report as Bad a message directly from the add in without any other action required (Docs: How the "Report as" button works)

Enable APIs in LibraCyber ESG

• Login in your ESG
• Go in Admin Area -> Authentication -> Web Portal -> API Service
• Enable the API Service

DEPLOYMENT MICROSOFT 365

If you need to deploy the Add-In automatically to many users you can manage to get this done centrally by connecting to Exchange Management Console.

• Log in to your Microsoft 365 tenant through Microsoft’s Online Portal with an admin account
• on the Microsoft 365, admin center choose Settings > Integrated apps > Add-ins
• Click on +  Deploy Add-in

• Click "+ Deploy Add-In"
• Select "Upload custom apps"
• Select "I have the manifest file (.xml) on this device"
• Select the previously created Manifest.xml file

• Click on Upload

• Click Deploy

• Select Next and then Close

DEPLOYMENT EXCHANGE-ON-PREMISE

If you need to deploy the Add-In automatically to many users you can manage to get this done centrally by connecting to Exchange Management Console.

• Log on to your Microsoft Exchange ECP with an admin account.
• navigate to Organization and then add-ins
• Click on + (new) –  Add from URL

NOTE: you need a valid TLS certificate on the ESG for the Outlook Plugin to work. Refer to the Certificates page of the manual.

• Enter the following URL: <your-hostname>/outlook-addin/manifest.xml

• Click on Install
• Edit LibraCyber ESG Outlook-Add-In and enable it

• Click Save