Integrating outlook SSO in Odoo give access denied when logging in.

Question

Many documentations that are provided says to use MS Business subscription to be able to have access. We develop a system which using Outlook SSO to login into the system. My question is as follows;

1. Since we use Basic and Standard subscription and have access to Azure AD, we setup all according to the documentations. Do we need the Premium subscription in order to be able to complete the work?
2. Does only account with Global Admin privileges is the only one that can create or edit the setting inside Azure AD?

Answer 1

@Muhamad Shahrul Izlan Hisham

If your users are receiving an "Access Denied" error it's possible that they are added as type "Guest" in your directory rather than type Member, or that "Guest users permissions are limited" is set to "Yes" in your tenant. Another possibility is that the OWA (Outlook Web App) is not enabled for those accounts. https://technet.microsoft.com/en-us/library/bb124124(v=exchg.160).aspx

To address your other questions though:

1. It shouldn't be necessary to have a Premium subscription but it depends which features you are trying to implement. SSO for pre-integrated enterprise applications is free. However, the number of objects in your directory and the features you wish to deploy may require more licenses. It would help if you could share more details about your environment such as how you configured the Azure AD authorization, which features you are trying to implement, how many users exist in your tenant, and whether you need custom roles. Reference: SSO licensing
2. In order to configure SSO you need to be a Global Administrator, Cloud Application Administrator or Application Administrator. Depending on which features you are trying to configure, a Global Admin account may be required. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso

If your users are receiving an "Access Denied" error it's possible that they are added as type "Guest" in your directory rather than type Member, or that "Guest users permissions are limited" is set to "Yes" in your tenant. Another possibility is that the OWA (Outlook Web App) is not enabled for those accounts. https://technet.microsoft.com/en-us/library/bb124124(v=exchg.160).aspx

For questions about the Odoo configuration, I would recommend reaching out on the Odoo forums.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.