Register Outlook Adaptive Cards for eShare

This document describes the steps to register Outlook Adaptive Cards for use with eShare. The registration is required for organizations who want to provide their internal users Outlook Actionable Message Adaptive cards for replying to Secure Conversations. At a high level, the steps involved are:

• Register an Entra ID Application Registration

• Register an Actionable Message Provider

• Expose an API and Pre-Authorize eShare Actionable Messages

REQUIREMENT:

The Person performing these steps must have an administrator role assignment of Application Administator and Exchange Administator, or Global Administator in the destination M365 tenant.

Register an Entra ID Application Registration

1. Sign into the Microsoft Entra ID admin center (https://entra.microsoft.com or https://entra.microsoft.us)

2. Navigate to ‘Entra ID’ > ‘Applications’ > ‘App Registrations’.

3. Select the ‘+ New registration’ button in the top left of the page.

4. Enter a Display name for the application (ex. ‘eSHARE Actionable Emails’)

5. Specify the Support Account Type as ‘Accounts in this organizational directory only - Single tenant’.

6. Leave the redirect URI as blank.

7. Select the ‘Register’ button and wait for the app to create.

8. Make note of the App’s Application ID for future steps.

9. This application will not need any API Permissions added or consented for.

Register an Actionable Message Provider

1. Sign into the Actionable Email Developer Dashboard (https://outlook.office.com/connectors/oam/publish).

2. Select the ‘+ New Provider’ button in the top left of the page.

3. Enter the following information in the Registration Window

   1. Friendly name - Enter a name for the provider, suggested to name it the same as the App Registration.

   2. MsEntra Application Id - Add the App registration’s Application ID.

   3. Sender email address from which actionable emails will orginate - Add 2 email addresses: no-reply@yourdomain.com, notifications@yourdomain.com (ex. no-reply@eshare.com, notifications@eshare.com)

   4. Target URLs - Add 2 url addresses: https://www.ncryptedcloud.com/api/3.1/adaptive-cards/messages and https://vanity.yourdomain.com/api/3.1/adaptive-cards/messages

   5. Public Key - Enter the Public key provided by your eShare Customer Success Manager.

   6. Scope of submission - For this use case it is recommended to select ‘Organization’.

4. Accept the terms and conditions and ‘Save’ the new provider to submit the request.

5. As an Exchange Administrator or Global Adminsitrator, navigate to https://outlook.office.com/connectors/oam/admin.

6. Select the newly created Provider that will be in PendingApproval state.

7. Make note of the ‘Provider Id (originator)’ and ‘App ID Uri’ values for later steps.

8. Scroll to the bottom of the page and select the ‘Approve’ button

9. Lastly, send the ‘Provider Id (orginator)’ value to your eShare CSM, and save the ‘App Id Uri’ somewhere as it will be required in the next section.

Expose an API and Pre-Authorize eShare Actionable Messages

1. Go back to the Entra ID admin center and open the previously created Application Registration.

2. Navigate to ‘Manage’ > ‘Expose an API’, and select ‘Edit’ next to the Application ID URI text box.

3. Paste the saved ‘App Id Uri’ in the Application ID URI text box, then select ‘Save’.

4. Under the ‘Scopes defined by this API’ section, select ‘+ Add a scope’.

5. Fill in the following information in the ‘Add a scope’ pop out screen:

   4. Scope name - Provide a name for the scope (ex. Global.test).

   5. Who can consent? - It is recommended to select ‘Admins only’.

   6. Admin consent display name - Provide a display name of the API only Admins will see.

   7. Admin consent description - Provide description of the API only Admins will see.

   8. User consent display name - Provide a display name of the API only Users will see.

   9. User consent description - Provide description of the API only Users will see.

   10. State - Ensure it is enabled.

6. Select the ‘Add scope’ button to save the information.

6. Under the ‘Authorized client applications’ section, select ‘+ Add a client application’.

7. Insert the below string in the Client ID field, and select the scope created in the previous step.

48af08dc-f6d2-435f-b2a7-069abd99c086

8. Select the ‘Add application’ button to save the changes.

9. The API is now exposed and Adaptive cards are now ready to be used in eShare.

NOTE:

To utilize Outlook Actionable Message Adapative Cards with eShare, the setting must be enabled in the Admin Console. Please refer to the following guide for more information.