Calendar Integration: Office 365/Exchange

Overview

The Meeting Scheduler module permits students to make appointments with advisors and other staff based on their institutional calendar availability, as well as their custom availability settings configured in Student Success & Engagement User Settings.

In order to use the Meeting Scheduler module it must be enabled by Watermark staff. If you have not requested the Meeting Scheduler module to be enabled, please contact your Customer Success Manager or Implementation Project Manager.

Once enabled, Meetings must be configured within Student Success & Engagement Administration and integrated with the institution's calendar system. If an institution has both Google and Office 365/Exchange on campus, they should integrate with the calendar system that staff users will be using for meeting availability.

NOTE: Before beginning the calendar integration, Meetings should be configured in Student Success & Engagement Administration (with at least one Office and Service Offering for testing) and the Location data feed should be implemented.

More information/instructions: How to Configure Meeting Scheduler

Required Access

To complete this integration, the following access is required:

• SS&E Administrator Access
• Office/Azure AD tenancy Administrator Access
• Powershell Administrator (local computer) Access

Office 365/Exchange Calendar Integration

Once Meeting Scheduler is enabled by Watermark staff, the Office 365/Exchange Calendar Integration can be completed by the institution's Student Success & Engagement Administrator and IT department/calendar system administrator, following the instructions below:

1. The Office 365/Exchange administrator should create a Service Account (AccountName@school.edu) in Office 365 or Microsoft Exchange. 

   Note: this should be a regular account, not a shared mailbox.

   • This is the account whose calendar will "own" the meetings produced by the SS&E Meeting Scheduler.

   • When meetings are created through SS&E, they will be created on this calendar and the attendees (staff and student) will be invited to the meeting.

   • Meeting invites will be delivered from this account so it should be named appropriately, service account names like "SSE Scheduler" or "CollegeName Appointment Scheduler" are commonly used.

   • The Service Account should have access to read the calendars (free/busy permission) of all staff at your institution, as well as the ability to invite users to meetings.

   • The Service Account should be granted the AvailabilityOnly -AccessRights permission on the mailboxes of any staff that could accept meetings from within SS&E.

   • Autodiscover must be enabled.
     To test whether Autodiscover is enabled for your institution, utilize the Remote Connectivity Analyzer from Microsoft, found here: https://testconnectivity.microsoft.com/.

2. The Office 365/Exchange administrator should add Watermark SSE to Enterprise Applications

   • Click this link and sign in with an administrator account.

   • After accepting the permissions, you will be redirected to watermarkinsights.com. To confirm the integration, make sure that Watermark SSE has been added to your enterprise applications.

     Note: This integration employs the Graph API.

3. Enable the Meeting Scheduler Module in SS&E Administration (Administrator access is required) and limit permissions in PowerShell:

   • Navigate to Meetings > Meetings Configuration. 

   • Select the Microsoft button, then check the Enable Meeting Scheduler box.

   • Enter the Service Account name and email address (usually the same).

   • Select OAuth 2.0

   • Basic Authentication is not supported as it is in the process of being deprecated by Microsoft and is present for backwards compatibility reasons.

   • Click Grant Exchange Access.

   • Log in as an Office Administrator.

   • Limit Permissions in PowerShell. The permissions that are granted include access to all mailboxes. SS&E only needs access to the service account mailbox. 

     • Open Powershell as administrator

     • Restrict access to just the service account mailbox with the following commands:
       

       Install-Module -Name ExchangeOnlineManagement
       Import-Module ExchangeOnlineManagement
       Connect-ExchangeOnline

        

     • When prompted to log in, sign in as the Office administrator for your tenancy.
       

     • Copy the custom PowerShell script from the Meetings Configuration page, OR use the following script, updating the {service account address} with the service account email address that you created.
       

       New-ApplicationAccessPolicy -AccessRight RestrictAccess -AppId "b38378a7-2b51-42ac-b264-3f6247d6c409" -PolicyScopeGroupId {service account address} -Description "Restrict Aviso EWS access to the service account mailbox only."

        

     • The AppId is for the Aviso App, and this is the same value for all SS&E clients.

     • Note: PowerShell Configuration Troubleshooting can be found at the end of this article.

   • Verify that the Tenant Id is linked.

   • Save.

4. The integration can be tested by impersonating a test student and scheduling a meeting with a staff member. The staff member must have availability set up in their user settings.

   Note: If you are in implementation or a consulting project for this feature, you can let Watermark staff know that the calendar integration steps have been completed and which staff member you would like to be the test user. 

Meetings Configuration

After the calendar integration is complete, the institution should verify that Meeting Type, Service Delivery Location, and Service Offering are configured completely and correctly in the Administration screens. More information/instructions: How to Configure Meeting Scheduler

User Settings

To use Meeting Scheduler, staff and faculty users must choose to accept meetings by setting up their meeting availability in their individual User Settings under Meeting Requests.

Additional Resources

Instructions for Google Calendar Integration can be found here.

If these steps have been completed but users are unable to schedule meetings as expected, review the Meeting Scheduler Troubleshooting article.

Integration Applications

The SS&E Calendar Integration uses two integration apps.

• The Watermark SSE app employs the Graph API to quickly fetch calendar availability for multiple users at once.
• The Aviso App uses the service account user to create meetings and invite staff and student users. 

Troubleshooting PowerShell Configuration

If the following error is received:

ExchangeOnlineManagement.psm1 cannot be loaded because running scripts is disabled on this system.

Enable the ability to run scripts for the current user:

Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted

After running all the commands, optionally run the following to re-disable the users' ability to run scripts:

Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Restricted

Basic Authentication

Microsoft has deprecated Basic Authentication. Please see the following article published by Microsoft for more details: Basic Authentication Deprecation in Exchange Online – September 2022 Update

To upgrade from Basic Authentication to OAuth2.0, follow steps 2 and 3 above to enable the Meeting Scheduler Module in SS&E Administration (Administrator access is required) and limit permissions in PowerShell.

Meeting Scheduler Error: Once deprecated, we have seen that institutions suddenly find that meeting scheduler stops working and displays an error stating that "There was a problem loading the available time slots". Moving to OAuth usually fixes the error.