WebApplicationInfo element

Supports single sign-on (SSO) in Office Add-ins. This element contains information for the add-in as both:

  • An OAuth 2.0 resource to which the Office client application might need permissions.
  • An OAuth 2.0 client that might need permissions to Microsoft Graph.

Add-in type: Task pane, Mail, Content

Valid only in these VersionOverrides schemas:

  • Task pane 1.0
  • Content 1.0
  • Mail 1.0
  • Mail 1.1

For more information, see Version overrides in the add-in only manifest.

Associated with these requirement sets:

Note

The single sign-on API is currently supported for Word, Excel, Outlook, and PowerPoint. For more information about where the single sign-on API is currently supported, see IdentityAPI requirement sets. If you're working with an Outlook add-in, be sure to enable Modern Authentication for the Microsoft 365 tenancy. To learn how to do this, see Enable or disable modern authentication for Outlook in Exchange Online.

<WebApplicationInfo> is a child element of the VersionOverrides element in the manifest.

Child elements

Element Required Description
<Id> Yes The Application Id of the add-in's associated service as registered in the Azure Active Directory v 2.0 endpoint.
<Resource> Yes Specifies the Application ID URI of the add-in as registered in the Azure Active Directory v 2.0 endpoint.
Scopes Yes Specifies the permissions that the add-in needs to a resource, such as Microsoft Graph.

WebApplicationInfo example

<OfficeApp>
...
  <VersionOverrides xmlns="http://schemas.microsoft.com/office/mailappversionoverrides" xsi:type="VersionOverridesV1_0">
    ...
    <WebApplicationInfo>
      <Id>12345678-abcd-1234-efab-123456789abc</Id>
      <Resource>api://contoso.com/12345678-abcd-1234-efab-123456789abc</Resource>
      <Scopes>
        <Scope>Files.Read.All</Scope>
        <Scope>offline_access</Scope>
        <Scope>openid</Scope>
        <Scope>profile</Scope>
      </Scopes>
    </WebApplicationInfo>
  </VersionOverrides>
...
</OfficeApp>