Instructions for setting up an application in Azure AD for the Graph API

Microsoft frequently changes the naming of its products and the arrangement and names of its menus. Therefore, the information provided in the following instruction is valid only on the day of creation. We do not guarantee the accuracy of the naming for future reference. 

This guide is for Microsoft corporate users (Microsoft Azure AD) only. The usual Microsoft 365 Home User account does not offer this feature. 

This guide is separated into two parts: 

• The Microsoft Azure Cloud configuration
• The bookingtime organization configuration

Please finish reading through these instructions before starting.

Three values will be generated in the first part, which we will need in the second part of this guide. 

Part 1: Microsoft Azure Cloud configuration

1. Log in to the “Microsoft Entra Admin” Portal (https://entra.microsoft.com).
   
   
2. On the left side of the navigation menu, select "Applications," and then choose the sub-item "App registrations."
   
   
   
   
3. On the right side, top menu, select "New registration."
   
   
   
   
   1. Enter a descriptive name for the application at the top. For example: "Graph API Sync with bookingtime."
      
      
   2. Under "Supported account types," select "Accounts in this organizational directory only (NAME OF YOUR ORGANIZATION - single tenant)."
      
      
   3. Finally, click "Register" at the bottom. 
      
      
      
      
4. A window will open with the newly created application. At this point, two numbers need to be saved. Insert them into the table on the first page and save the document.
   
   
   1. 1. Copy the "Application (client) ID."
         
         
      2. Copy the "Directory (tenant) ID."
         
         
         
         
5. In the application's navigation, select "Certificates & secrets" and click on "New client secret".
   
   
   
   
6. A blade menu slides in from the right.
   
   
   1. Enter a descriptive name, for example: "bookingtime Client secret".
      
      
   2. Choose a duration for the validity of the key, for example: "180 days (6 months)".
      
      
      
      
7. Click "Add" at the bottom.
   After expiration of the ClientSecret, the calendar will not be able to synchronize. A new ClientSecret must be generated in order to synchronize the calendar again.
   
   
8. Immediately after creation, copy the ClientSecret from the Value field.
   
   It will not be accessible once a new key is created. In case of not saving the ClientSecret, you have to start over to generate a new ClientSecret.
   
   
   
   
9. In the left navigation menu, click on "API permissions" and then, on the right, the "Add a permission" button.
   
   
   
   
10. A blade menu slides in from the right.
    
    
    1. Click on "Microsoft Graph".
       
       
    2. Select "Application permissions".
       
       
    3. The permissions will be shown in a list. Scroll down to the entry “Calendars”.
       
       
    4. Then tick the box for “Calendars.ReadWrite” and hit “Add permissions”.
       
       
       
       
11. In the right section, under "Configured permissions", click the button "Grant admin consent for 'NAME_OF_ORGANIZATION'".
    
    
    
    
12. Confirm with “Yes” the “Grant the admin consent confirmation” dialog.
    
    

With that, the registration of the application in Azure AD is complete.

We will now use the generated values TenantId, ClientId, and ClientSecret to connect your Microsoft 365 with bookingtime.

The application's permissions apply to all members of the organization in which it was created. Delegated permissions can currently not be implemented with the Graph API.

Part 2: bookingtime organization configuration

1. Log in to the bookingtime Portal (https://app.bookingtime.com/).
   
   
2. In the left hand blade menu, click on “Settings”.
   
   
   
   
3. Select “General Settings” and afterwards select the “Office 365 sync” sub-menu.
   
   
   
   
4. Now enter the three generated values that you generated in the first part.
    
   1. To enter the TenantID, please add the following URL before the ID: 
      
      “https://login.microsoftonline.com/” 
      The server URL should look e.g, like this:
      “https://login.microsoftonline.com/10d38d51-bb2d-4df3-a713-db339d5493rh”
      
      
   2. Enter the ClientID as it is.
      
      
   3. Enter the ClientSecret as it is.
      
      
      
      
5. In the left hand blade menu, click on “Synchronization” and select the “External calender” button.
   
   
   
   
6. Select an employee and select the “Confirm” button.
   
   
7. Select the employee and enter an e-mail address. After a few minutes, the synchronization should start. If successful, the “Last success” field on the right will show a timestamp. 
   
   

Appendix: Troubleshooting

In case your synchronization fails, a brief notification will be shown for the user. On the picture below, you see a successful synchronization and a failed synchronization.

To get a detailed information of the error, select the “Sync History” tab.

As you can see, in this case the user “d.wellt@organization.com” is invalid and likely not in the organization, or may not be written correctly.

If the synchronization fails, please check the values you entered on the bookingtime website or check your configuration in Microsoft Azure.

If errors still persist, don’t hesitate contacting us.