> ## Documentation Index
> Fetch the complete documentation index at: https://docs.equa.cc/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Integration

> How to connect Microsoft 365 and manage groups in Equa

# Microsoft Integration

The Microsoft Integration connects your Equa organization to Microsoft 365 via Azure Active Directory. Once connected, you can manage Microsoft 365 groups and synchronize team membership directly from the Equa platform.

## Prerequisites

* Active Equa account with organization admin permissions
* A Microsoft 365 tenant with Azure AD
* Azure AD application credentials (Client ID, Tenant ID, and Client Secret) configured by your IT administrator
* Microsoft integration enabled for your organization

## Understanding the Integration

The Microsoft Integration uses the OAuth 2.0 client credentials flow, which means it operates at the application level rather than requiring each user to sign in. Your IT team sets up the Azure AD application once, and Equa can then manage groups on behalf of the organization.

**Capabilities:**

* Link an Equa organization to an existing Microsoft 365 group
* Create new Microsoft 365 groups
* View and manage group membership
* Synchronize team members between Equa and Microsoft 365

## Connecting Microsoft 365

### Step 1: Navigate to Integrations

From your organization sidebar, click **Settings > Integrations > Microsoft**.

### Step 2: Enter Azure AD Credentials

Your IT administrator will provide:

* **Client ID** — The Azure AD application ID
* **Tenant ID** — Your Microsoft 365 tenant identifier
* **Client Secret** — The application authentication secret

Enter these values in the configuration form.

### Step 3: Test the Connection

Click **Test Connection** to verify that Equa can communicate with the Microsoft Graph API. A success message confirms the integration is working.

### Step 4: Save

Click **Save** to store the credentials and activate the integration.

## Common Tasks

### Linking to a Microsoft 365 Group

1. Navigate to **Settings > Integrations > Microsoft**
2. Click **Link Group**
3. Browse or search for existing Microsoft 365 groups
4. Select the group you want to link
5. Click **Link**

The group ID is stored and used for all subsequent group operations.

### Creating a New Microsoft 365 Group

1. Navigate to **Settings > Integrations > Microsoft**
2. Click **Create Group**
3. Enter the group name and description
4. Click **Create**

The new group is created in your Microsoft 365 tenant and automatically linked to your Equa organization.

### Viewing Group Members

Once a group is linked:

1. Navigate to **Settings > Integrations > Microsoft**
2. The linked group and its current members are displayed

### Synchronizing Membership

Team member changes in Equa can be reflected in your Microsoft 365 group:

1. Navigate to the Microsoft integration settings
2. Click **Sync Members**
3. Review the proposed changes
4. Confirm the sync

## Tips

<Tip>
  The client credentials flow does not require individual users to sign in to Microsoft. This makes the integration seamless for all team members — only your IT administrator needs to configure it once.
</Tip>

<Tip>
  Make sure the Azure AD application has the correct Microsoft Graph permissions (Group.ReadWrite.All) assigned and admin consent is granted before connecting.
</Tip>

## Design References

Design-system source for this guide: [Microsoft Integration screenshot gallery](/architecture/design-system/screenshots/microsoft) and [EquaAlert](/architecture/design-system/components/equa-alert), [EquaButton](/architecture/design-system/components/equa-button), [EquaProgress](/architecture/design-system/components/equa-progress), [EquaCard](/architecture/design-system/components/equa-card).

## Troubleshooting

<AccordionGroup>
  <Accordion title="Connection test failed">
    **Cause:** The Azure AD credentials may be incorrect, or the application may not have the required permissions.

    **Solution:** Verify the Client ID, Tenant ID, and Client Secret with your IT administrator. Ensure the Azure AD application has the "Group.ReadWrite.All" permission with admin consent.
  </Accordion>

  <Accordion title="Cannot find Microsoft 365 groups">
    **Cause:** The Azure AD application may not have permission to list groups, or there may be no groups in the tenant.

    **Solution:** Ask your IT administrator to verify the application permissions in Azure AD. The application needs "Group.Read.All" at minimum to list groups.
  </Accordion>

  <Accordion title="Group sync is not updating members">
    **Cause:** The application may lack write permissions for group membership management.

    **Solution:** Ensure the Azure AD application has "Group.ReadWrite.All" permission with admin consent. Check the integration logs for specific error messages.
  </Accordion>
</AccordionGroup>

## Related

* [User Guides](/guides/index)
* [Google Drive Sync](/guides/google-drive-sync)
* [Managing Team Members](/guides/managing-team-members)
* [Roles and Permissions](/guides/roles-and-permissions)
* [Microsoft Integration Specification](/specs/017-microsoft-integration/spec)