Booking System Preparation: Microsoft 365

Create an Evoko Home Service Account

1. Log into the Microsoft 365 Admin Center with your Microsoft account.

2. Navigate to Users in the sidebar, then Active Users.

3. Click Add A User to open the Add A User pane.

4. Enter a Display Name (e.g., "Evoko Home Service Account"), Username, and Password, then click Next.

5. Assign a product license for Exchange Online (Plan 1). This will allow the Service Account to access a mailbox, which is required for Evoko Home.

6. Click Next.

7. Skip the Optional Settings page by clicking next again.

8. Review the settings, then click Finish Adding. You will see a message that the account has been created successfully.

9. In an Incognito/InPrivate Window, log into outlook.office.com with the newly-created Service Account. This will create an Inbox for this account. It is important to complete this step before proceeding.

 

 

Create Rooms

Create one or more Rooms to allow booking in Evoko Home.

1. In the Microsoft 365 Admin Center, navigate to Resources in the sidebar (you may need to click ⋯ Show All), then Rooms & Equipment.

2. Click + Add Resource to open the Add Resource pane.

3. Set up a Room resource. Enter the Name and Email you would like to use for this room. Click Save.

4. You will see a message that the Room has been created successfully. Click Add Another Resource to add more rooms, or ✕ to close the pane.

 

 

Register the Evoko Home Azure AD application in Microsoft Entra

1. Log into the Microsoft Entra Admin Center with your Microsoft account.

2. Navigate to Applications in the sidebar, then App Registrations.

3. Click on + New Registration.

4. Enter a name for the application (e.g., "Evoko Home App") and click Register.

5. The Overview page will appear. Make a note of the Azure AD Application (Client) ID and Azure AD Directory (Tenant) ID.

6. Navigate to Certificates and Secrets.

7. Click on + New Client Secret.

8. Enter a description and expiration time. Note that a valid secret is required for Evoko Home to sync meetings with Microsoft 365; once expired, you will need to generate a new Client Secret and enter it in Evoko Home to re-authenticate. Click Add.

9. Make a note of the Azure AD Client Secret Value.

10. Navigate to Enterprise Applications in the sidebar. Search for the newly-created Azure AD Application and click on its name in the list.

11. Make a note of the Enterprise App Object ID.

 

 

Add API permissions to app

Use the following steps to grant the necessary permissions to the Evoko Home application in Microsoft Entra.

1. Navigate to Applications in the sidebar, then App Registrations.

2. Search for the newly-created Azure AD Application and click on its name in the list.

3. Navigate to API Permissions.

4. Click on + Add a Permission to open the Request API Permissions pane.

5. Click on Microsoft Graph, then click on Application Permissions.

6. In the list of permissions, search for "User.Read" and mark User.Read.All.

7. In the same list, search for "Group.Read" and mark Group.Read.All.

8. At the bottom of the pane, click Add Permissions.

9. Click ✓ Grant Admin Consent for your Organization.

 

 

Create Groups

Create the resource and sender groups used by the Evoko Home application.

1. Navigate to Groups in the sidebar, then Overview.

2. To create the Evoko Home Resource Group, click New Group.

3. Set the Group Type to Microsoft 365 and enter the Group Name (e.g., "Evoko Home Resource Group").

4. Under Members, click No Members Selected to open the Add Members pane.

5. Select the Rooms you want to add. At the bottom of the pane, click Select.

6. Click Create to create the Resource Group.

7. In the Overview section, make a note of the Resource Group Object ID.

8. To create the Evoko Home Senders Group, navigate again to Groups in the sidebar, then Overview, then click New Group.

9. Set the Group Type to Microsoft 365 and enter the Group Name (e.g., "Evoko Home Senders Group").

10. Under Members, click No Members Selected to open the Add Members pane.

11. Select the Evoko Home Service Account. At the bottom of the pane, click Select.

12. Click Create to create the Senders Group.

13. In the Overview section, make a note of the Senders Group Object ID.

 

Service Principal creation in PowerShell

In this section, you will register the Evoko Home application as a Service Principal in PowerShell.

1. Install and load the Exchange Online PowerShell module if it is not already present:

Set-ExecutionPolicy RemoteSigned
Install-Module -Name ExchangeOnlineManagement
Import-Module ExchangeOnlineManagement

2. Connect to Exchange Online. Replace <UPN> with your Exchange Online account in user principal name format (e.g., admin@organization.onmicrosoft.com):

​​​​Connect-ExchangeOnline -UserPrincipalName <UPN>

3. Create a service principal using the values gathered in the previous sections:

New-ServicePrincipal -AppId <Azure AD Application (Client) ID> -ObjectId <Enterprise App Object ID> -DisplayName "Evoko Home"

4. Create a management role assignment for the Resource Group using the values gathered in the previous sections:

New-ManagementRoleAssignment -App <Enterprise App Object ID> -Role "Application Calendars.ReadWrite" -RecipientGroupScope <Resource Group Object ID>

5. Create a management role assignment for the Senders Group using the values gathered in the previous sections:

New-ManagementRoleAssignment -App <Enterprise App Object ID> -Role "Application Mail.Send" -RecipientGroupScope <Senders Group Object ID>

 

 

Further reading

Evoko Home Installation: Windows Server

Evoko Home Installation: Ubuntu