Office 365 guide under SAAS Integrations

This guide provides detailed, step-by-step instructions to integrate Microsoft Office 365 (M365) with Matters.ai for secure, real-time, and historical scanning of OneDrive,SharePoint and Outlook data.

Integrating Office 365 involves 2 Steps

1. Create and Configure the Microsoft Entra Application

2. Connect Microsoft 365 to Matters.ai

Step 1 Create and Configure the Microsoft Entra Application

1.1 Register a New Application

1. Go to https://entra.microsoft.com, search for App registrations in the top search bar.

2. Click App registrations.

3. Select New registration.

4. Complete the registration form:

   • Name: Enter a descriptive name (e.g., Optiq O365 Integration).

   • Supported account types: Select

     Accounts in any organizational directory (Any Microsoft Entra ID tenant – Multitenant) and personal Microsoft accounts (e.g., Skype, Xbox).

5. Click Register.

1.2 Add API Permissions — Microsoft Graph

1. In the left menu, click API permissions.

2. Select Add a permission → Microsoft Graph → Application permissions.

3. Add the following permissions:

4. Click Add permissions.

1.3 Add API Permissions - Office 365 Management APIs

1. From API permissions, click Add a permission.

2. Choose Office 365 Management APIs → Application permissions.

3. Add below permissions:

4. Click Add permissions.

1.4 Grant Exchange Online Permissions

• In the API permissions section, click Add a permission, then select APIs my organisation uses.

• In the search bar, type Office 365 Exchange Online and select it from the results.

• Choose Application permissions when prompted.

• From the list of available permissions, select Exchange.ManageAsApp by checking the box. Confirm and save the selection to grant the permission.

Permission given

1.5 Grant Admin Consent

1. In API permissions, click Grant admin consent for <Your Organization>.

2. Confirm the action.

3. Ensure all permissions display Granted for <Your Organization>.

1.6 Create a Client Secret

1. Go to Certificates & secrets.

2. Under Client secrets, click New client secret.

3. Enter:

   • Description: e.g., Optiq-Integration-Secret.

   • Expiry: Select per your organization’s policy.

4. Click Add.

5. Copy the Secret Value immediately and store it securely.

   Note: This value will not be visible again.

1.7 Record Application Identifiers

From the Overview page, copy and securely store:

• Application (client) ID

• Directory (tenant) ID

Step 2 Connect Microsoft 365 to Matters.ai

2.1 Open the Matters.ai Dashboard

1. Log in to Matters Dashboard.

2. You will land on the Dashboard Overview page.

2.2 Navigate to the Office 365 Connector

1. Click Integrations in the navigation menu.

2. Select the SAAS tab.

3. Locate Microsoft Office 365.

4. Click Connect.

2.3 Complete the Integration Form

In the O365 Integration modal:

1. Integration Name: Provide a meaningful label (e.g., Prod-M365-Integration).

2. Client ID: Paste the Application (client) ID

3. Client Secret: Paste the Secret Value

4. Tenant ID: Paste the Directory (tenant) ID

7. Click Connect.

On success, an Integration Success confirmation message will appear.

Step 2.4: Configure SAAS Scan Settings

Once Office 365 Integration is Complete:

• Navigate to SAAS.

• All SharePoint sites, OneDrive users, and Outlook-related data will be automatically Listed in the SAAS Inventory.

Step 2.5: Manually Configure SAAS Scans

To Configure SAAS Scans click on Scan Settings and follow the steps below to configure OneDrive, SharePoint, and Outlook scanning.

Step 2.5.1: Manage OneDrive User Scanning

1. Under the OneDrive section, you will see a list of users associated with your organization.

2. Add or remove users as needed to specify whose OneDrive content should be scanned.

3. This granular control allows you to focus scanning resources on relevant accounts only.

Step 2.5.2: Manage SharePoint Site Scanning

1. Switch to the SharePoint tab.

2. Here you can add or remove SharePoint sites to be included in the scan.

3. After selecting the sites, click Save to apply your configuration.

Step 2.5.3: Manage Outlook Mail Scanning

1. Switch to the Outlook tab.

2. Here you can add or remove Outlook mails to be included in the scan.

3. After selecting the Outlook mails click Save to apply your configuration.

You can choose between two scanning modes based on your organizational needs:

• Real-Time Scan: Enables continuous monitoring of changes in user accounts, files, and sites. This mode ensures immediate detection of new data or modifications.

• Backfilling Scan: Scans all existing data comprehensively to establish baseline coverage and identify sensitive entities across historical content.

Step 2.6: Confirm Configuration and Start Scan

1. Upon saving, a success message “SaaS configuration saved successfully” will appear.

2. Scans will automatically run based on your configured schedule and options.

3. Sensitive entities discovered through scanning will be displayed in the dashboard for review.

Step 2.7: Review Scanned Entities

1. To inspect the detailed list of sensitive entities found:

   • Click on the OneDrive Users, SharePoint sites or Outlook mails displayed on the Overview page to check for scanned data.

• When clicked on the File Explorer view you can see the folder-structure navigation of scanned files and detected sensitive data.

Required Permissions Summary

Microsoft Graph (Application):

Files.Read.All

Sites.Read.All

Directory.Read.All

AuditLog.Read.All

AuditActivity.Read

AuditLogsQuery-Entra.Read.All

AuditLogsQuery-Exchange.Read.All

AuditLogsQuery-OneDrive.Read.All

AuditLogsQuery-SharePoint.Read.All

AuditLogsQuery.Read.All

Calendars.Read

Calendars.ReadBasic.All

CustomSecAttributeAuditLogs.Read.All

Group-Conversation.Read.All

Group.Read.All

Mail.Read

Mail.ReadBasic

Mail.ReadBasic.All

MailboxFolder.Read.All

MailboxSettings.Read

User.Read

User.Read.All

Office 365 Management APIs (Application):

ActivityFeed.Read

ActivityFeed.ReadDlp

Following this guide ensures that your Microsoft 365 environment is successfully integrated with Matters.ai enabling both real-time and historical data scanning across OneDrive, SharePoint and Outlook.This supports proactive compliance, data governance, and security monitoring within your organization.