Integrating outlook SSO in Odoo give access denied when logging in.

Muhamad Shahrul Izlan Hisham 0 Reputation points
2023-05-12T07:18:58.1966667+00:00

Many documentations that are provided says to use MS Business subscription to be able to have access. We develop a system which using Outlook SSO to login into the system. My question is as follows;

  1. Since we use Basic and Standard subscription and have access to Azure AD, we setup all according to the documentations. Do we need the Premium subscription in order to be able to complete the work?
  2. Does only account with Global Admin privileges is the only one that can create or edit the setting inside Azure AD?
Outlook
Outlook
A family of Microsoft email and calendar products.
3,215 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,094 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 35,616 Reputation points Microsoft Employee
    2023-05-15T21:34:11.9333333+00:00

    @Muhamad Shahrul Izlan Hisham

    If your users are receiving an "Access Denied" error it's possible that they are added as type "Guest" in your directory rather than type Member, or that "Guest users permissions are limited" is set to "Yes" in your tenant. Another possibility is that the OWA (Outlook Web App) is not enabled for those accounts. https://technet.microsoft.com/en-us/library/bb124124(v=exchg.160).aspx

    To address your other questions though:

    1. It shouldn't be necessary to have a Premium subscription but it depends which features you are trying to implement. SSO for pre-integrated enterprise applications is free. However, the number of objects in your directory and the features you wish to deploy may require more licenses. It would help if you could share more details about your environment such as how you configured the Azure AD authorization, which features you are trying to implement, how many users exist in your tenant, and whether you need custom roles. Reference: SSO licensing
    2. In order to configure SSO you need to be a Global Administrator, Cloud Application Administrator or Application Administrator. Depending on which features you are trying to configure, a Global Admin account may be required. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso

    If your users are receiving an "Access Denied" error it's possible that they are added as type "Guest" in your directory rather than type Member, or that "Guest users permissions are limited" is set to "Yes" in your tenant. Another possibility is that the OWA (Outlook Web App) is not enabled for those accounts. https://technet.microsoft.com/en-us/library/bb124124(v=exchg.160).aspx

    For questions about the Odoo configuration, I would recommend reaching out on the Odoo forums.

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.

    0 comments No comments