Integrating outlook SSO in Odoo give access denied when logging in.

Muhamad Shahrul Izlan Hisham 0 Reputation points
2023-05-12T07:18:58.1966667+00:00

Many documentations that are provided says to use MS Business subscription to be able to have access. We develop a system which using Outlook SSO to login into the system. My question is as follows;

  1. Since we use Basic and Standard subscription and have access to Azure AD, we setup all according to the documentations. Do we need the Premium subscription in order to be able to complete the work?
  2. Does only account with Global Admin privileges is the only one that can create or edit the setting inside Azure AD?
Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,617 questions
Outlook
Outlook
A family of Microsoft email and calendar products.
992 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 24,051 Reputation points Microsoft Employee
    2023-05-15T21:34:11.9333333+00:00

    @Muhamad Shahrul Izlan Hisham

    If your users are receiving an "Access Denied" error it's possible that they are added as type "Guest" in your directory rather than type Member, or that "Guest users permissions are limited" is set to "Yes" in your tenant. Another possibility is that the OWA (Outlook Web App) is not enabled for those accounts. https://technet.microsoft.com/en-us/library/bb124124(v=exchg.160).aspx

    To address your other questions though:

    1. It shouldn't be necessary to have a Premium subscription but it depends which features you are trying to implement. SSO for pre-integrated enterprise applications is free. However, the number of objects in your directory and the features you wish to deploy may require more licenses. It would help if you could share more details about your environment such as how you configured the Azure AD authorization, which features you are trying to implement, how many users exist in your tenant, and whether you need custom roles. Reference: SSO licensing
    2. In order to configure SSO you need to be a Global Administrator, Cloud Application Administrator or Application Administrator. Depending on which features you are trying to configure, a Global Admin account may be required. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso

    If your users are receiving an "Access Denied" error it's possible that they are added as type "Guest" in your directory rather than type Member, or that "Guest users permissions are limited" is set to "Yes" in your tenant. Another possibility is that the OWA (Outlook Web App) is not enabled for those accounts. https://technet.microsoft.com/en-us/library/bb124124(v=exchg.160).aspx

    For questions about the Odoo configuration, I would recommend reaching out on the Odoo forums.

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.

    0 comments