Existing Microsoft O365 Admin Setup for Federated Email

Federated Email allows HCM users to automatically connect their Microsoft O365 account upon login to AviontéBOLD. For existing O365 Integrated clients, the setup requires adding a Federated URI to the Azure BOLD Email Integration application and configuring the email domain in BOLD.

Preparation

1. All user tokens will be automatically converted.
2. Once Federated Email is working, both IMAP API Permissions can be removed, along with the URIs for Send/Sync tokens:
   1. CallbackAuthTokenSend
   2. CallbackAuthTokenSync
3. Add the email domain in Utilities > System Email Settings > Microsoft O365 Email Setup.
4. No other changes are required for Federated Email to work properly.

URI Setup Instructions

1. Log into the Azure Active Directory admin center.
2. Click Microsoft Entra ID.
3. Click App Registrations.
4. Click All applications.
5. Search for Bold Email Integration.
6. Select the active Bold Email Integration application.

7. Click Authentication.

8. Click Add URI.

9. Add the Callback Federated Auth Token Send URI:
   1. https://CLIENTINSTNAME.myavionte.com/sonar/api/oauth2/CallbackFederatedAuthTokenSend
10. Click Save.

11. Confirm the URI has been successfully added.

Microsoft O365 Email Setup

1. Navigate to Utilities > System Email Settings > Microsoft O365 Email Setup.

 

2. Enter the Federated email domain.

3. Click Save to apply the domain settings.

Troubleshooting: Email Mismatch Errors

If the email address configured in Microsoft Entra/O365 doesn't match what is set for the corresponding user in AviontéBOLD, Federated SSO login attempts will fail and the user will see an error like this:

To resolve this, have someone from the customer's IT department confirm the email address configured for the affected user in Microsoft Entra or the O365 Admin portal, then update AviontéBOLD to match.

4. To view the email address in the Entra Admin Center, navigate to the user's profile and check the Email field under Contact Information on the Properties tab.

5. If the customer only has access to the O365 Admin portal, the email address can be found under Username and email on the user's account page.

6. Once the correct email address is confirmed, choose one of the following resolutions:
   1. Update the email address on the HCM user record in AviontéBOLD to match what is configured in Microsoft Entra/O365.
   2. Temporarily disable Federated SSO in AviontéBOLD if a discrepancy between O365 and BOLD needs to be maintained.