Skip to main content

​
Azure Graph API Configuration

To monitor your company’s email inbox for quoting activities, you’ll need to configure Microsoft Graph API access. Follow these steps to obtain the required configuration values for your Outlook Email Integration in Seminode:

​
Step 1: Register an Application in Microsoft Entra ID (Azure AD)

  1. Sign in to the Azure portal
  2. Navigate to Microsoft Entra ID > App registrations
  3. Click New registration
  4. Enter an application name (e.g., “Seminode Email Monitor”)
  5. Select Accounts in this organizational directory only
  6. Click Register

​
Step 2: Get Client ID and Tenant ID

After registering your application:
  1. On the application Overview page, copy the Application (client) ID
    • This is your Client ID
  2. Also copy the Directory (tenant) ID
    • This is your Tenant ID

​
Step 3: Create Client Secret

  1. In your app registration, go to Certificates & secrets
  2. Click New client secret
  3. Add a description (e.g., “Seminode API Secret”)
  4. Select an expiration period
  5. Click Add
  6. Important: Copy the secret Value immediately
    • This is your Client Secret
    • You won’t be able to see it again once you navigate away

​
Step 4: Configure API Permissions

  1. Go to API permissions in your app registration
  2. Click Add a permission
  3. Select Microsoft Graph
  4. Choose Application permissions
  5. Add the following permissions:
    • Mail.Read - Read mail in all mailboxes
    • Mail.Send - Send mail as any mailbox
    • Mail.ReadWrite - Read and write mail in all mailboxes
  6. Click Add permissions
  7. Important: Click Grant admin consent for your organization
Scoping Mailbox Access for Enterprise CustomersBy default, granting Mail.Read at the application level gives the registered app access to all mailboxes in the Microsoft 365 tenant. For enterprise customers concerned about this, Microsoft supports Role Based Access Control (RBAC) for Applications in Exchange Online, which restricts the app to only specific mailboxes (e.g., the shared mailboxes created for Seminode) using management scopes or administrative units.This is configured entirely on the customer’s side in Exchange Online — no changes are needed in Seminode. Ask your IT team to set up RBAC for Applications, scoping the app registration to only the monitored shared mailboxes.Reference: RBAC for Applications in Exchange Online This is recommended for large enterprises or any organization with strict email data governance requirements.

​
Step 5: Confirm the Monitored Mailbox

  1. Verify that the mailbox you want to monitor exists in your Microsoft 365 tenant.
    • This can be a user mailbox (e.g., someone’s account) or a shared mailbox (e.g., quotes@company.com).
  2. Use the primary SMTP address of that mailbox (e.g., quotes@company.com) as the Monitored Email Address when filling out the configuration form.

​
Step 6: Enter Values in Seminode

  1. In the Seminode app, go to Settings → Connectors .
  2. Find the Outlook section.
  3. Click Add to open the Create Graph API Configuration form.
  4. Paste the values you collected:
    • Client ID
    • Tenant ID
    • Client Secret
    • Monitored Email Address (e.g., quotes@company.com)
  5. Toggle Enable this configuration if you want it active immediately.
  6. Click Create to save.
Once saved, Seminode will begin monitoring the specified mailbox for quoting emails.
Use a shared inbox email, not a personal one — emails from connected accounts are visible to all team members with inbox access.
If you don’t see an Add button, your account may not have the connector-management permission — ask an administrator. If you don’t have the Azure values yet, the empty state includes a copyable email template you can send to your IT team.

​
Managing a Configuration

Each configuration row shows a status indicator — Connection active, Connection failed, Connector disabled, or Connection status unknown — along with:
  • On/Off toggle — enable or disable monitoring without deleting the configuration
  • Test — verify the connection is working
  • Edit — update any of the four configuration values
  • Delete Configuration — remove the connection entirely

​
Required Configuration Values

Once you’ve completed the above steps, you’ll have four values to enter in the configuration form:
  • Client ID: Application (client) ID from Step 2
  • Tenant ID: Directory (tenant) ID from Step 2
  • Client Secret: Secret value from Step 3
  • Monitored Email Address: The mailbox you want to track (e.g., quotes@company.com)
Keep your Client Secret secure and never share it publicly. Store it safely as you won’t be able to retrieve it from Azure once you navigate away from the secrets page.

​
Next Steps

With these values configured, your Seminode platform will be able to monitor your company’s email inbox for quoting activities and automatically process relevant communications with your supply chain partners.