Microsoft 365 setup — Azure AD app registration

3-step handoff: stage the Azure AD app reg, grant admin consent, then verify the workspace connection. v1 walks-through only — the OAuth start endpoint returns 501 until the live wire-up lands.

Step 1 — register the Azure AD app

Open the Azure portal as a tenant admin → Entra ID → App registrations → New registration.
Name it NEOM — Outlook (or per your naming convention). Supported account type: Single tenant.
Under Redirect URI, choose Web and paste the URL below.

https://staging.neom.idcconstruct.com.au/api/v1/integrations/m365/callback

After registration, copy the Application (client) ID and the Directory (tenant) ID. Generate a client secret under Certificates & secrets. You'll paste these into your env file (M365_CLIENT_ID, M365_TENANT_ID, M365_CLIENT_SECRET) before step 2. See ADR-0001 for the canonical env-var naming policy.

Continue →