Connect with Microsoft 365 Scope

The Microsoft 365 activities establish an authenticated connection to a Microsoft 365 application via the Microsoft 365 Scope activity.

Inside the Scope activity, you can use both classic activities, as well as Connection activities (that use Integration Service connections). When using Connection activities inside Microsoft 365 Scope, they inherit the authentication from the Scope. See How to use Microsoft 365 activities without Integration Service connections.

You have multiple authentication types available:

• Interactive token
• Application ID and Secret
• Application ID and Certificate
• Username and Password
• Integrated Windows Authentication (IWA)

Microsoft Authentication flow	Microsoft 365 Scope - Authentication type	Robot type - Attended	Robot type - Unattended	API permission type
OAuth 2.0 authorization code flow	Interactive Token - public app			Delegated permissions
	Interactive Token - BYOA			Delegated permissions
Integrated Windows authentication (IWA)	Integrated Windows Authentication			Delegated permissions
Username and password	Username and password			Delegated permissions
OAuth 2.0 client credentials flow	Application ID and secret			Application permissions
	Application ID and certificate			Application permissions

^* Integration Service keeps the connection token alive by refreshing the token. After a certain period of time, you must manually refresh the connection by re-authentication.