--- title: "Connection agent for apps (formerly for CUE Assist)" canonical: "https://docs.cuesystem.com/space/TAM/242581510/Connection%20agent%20for%20apps%20(formerly%20for%20CUE%20Assist)" format: markdown --- This connection agent is used in CUE Assist and Outlook add-in CUE Addin to communicate with external calendar servers and for user login and authentication. It can also be used to log in CUE Admin users if Microsoft 365 or Google identity authentication is required. No service account is required for this connection agent because users log in with their own account. ![image](media://6e31bfa1-b264-40c5-9b0b-f43df31a2a77) touchONE applications can communicate with the following servers: - Microsoft 365 (Office 365) using Microsoft Graph - Exchange server using EWS (Exchange Web Services) - Google Workspace using Google Calendar API, Google People API and Contacts API For details, expand the procedures for the given server types below:
Microsoft 365 Connection agent for CUE Assist in Microsoft 365 needs an application registered in Azure AD. The procedure for creating an application is described here: [Registered app creating](https://cue.atlassian.net/wiki/spaces/M3SG/pages/255950885) Use the procedure **Configuration For apps**. **OAuth 2.0 Authorization Code Flow** is used for authentication. For details see: [Authorization Code Flow](https://cue.atlassian.net/wiki/spaces/M3SG/pages/450789377) Users can usually approve these permissions directly when they first log in to CUE Assist. However, it is possible that your security policy does not allow for user approval of permissions and you may need to require consent granted by the administrator. To create a new connection agent, press the ***+ NEW*** button in the top right corner and then ***NEW MICROSOFT 365*** in the section **For apps**. ![image](media://0e5e33f2-c9af-44c0-8e57-0a884f87844c) > Macro (excerpt-include) > Macro (excerpt-include) #### > Macro (excerpt-include) #### Client secret Enter here the Client secret of the application registered in Azure AD. The client secret is a long string of random characters. #### Allow to log in to CUE Admin with an external identity If you want to enable logging in to CUE Admin using an external identity and not just a local account, follow the steps in [this tutorial](https://cue.atlassian.net/wiki/spaces/TAM/pages/844693546). #### Text for Login button Here you can enter the text that appears on the button on the login screen to log in with this external identity, e.g. “LOGIN USING M365”. ![image-20240124-151450.png](media://51ee8b20-48db-4632-a13e-375b06d28a86) #### Redirect URI, Experimental redirect URI for Outlook add-in, Admin URI for login with external identity You will need this redirect URI’s for the application registered in Azure AD. For details see: [Registered app creating](https://cue.atlassian.net/wiki/spaces/M3SG/pages/255950885). You can copy URI to the clipboard with the ***+*** button. > Macro (excerpt-include)
Exchange server For Exchange, you need the address of the Exchange server. EWS (Exchange Web Services) is used for communication. To create a new connection agent, press the ***+ NEW*** button in the top right corner and then ***NEW EXCHANGE*** in the section **For CUE Assist**. ![image](media://e73ace44-7760-4421-a6af-2ccf04ebc08d) #### > Macro (excerpt-include) > Macro (excerpt-include) #### Redirect URI, Experimental redirect URI for Outlook add-in, Admin URI for login with external identity You don't need a redirect URI’s for Exchange Server. #### > Macro (excerpt-include)
Google Workspace For Google Workspace, you need a project with the appropriate APIs enabled, a Client ID, and a Client secret for secure communication. The procedure for creating a project is described here: [Application for apps](https://cue.atlassian.net/wiki/spaces/GWSG/pages/275612060) **OAuth 2.0 Authorization Code Flow** is used for authentication. To create a new connection agent, press the ***+ NEW*** button in the top right corner and then ***NEW GOOGLE*** in the section **For apps**. ![image](media://45b9edbd-1776-4643-93d2-0af6d9021756) #### > Macro (excerpt-include) #### Client ID Enter here the Client ID of the project in Google Workspace. #### Client secret Enter here the Client secret of the project in Google Workspace. The client secret is a long string of random characters. #### Allow to log in to CUE Admin with an external identity If you want to enable logging in to CUE Admin using an external identity and not just a local account, follow the steps in [this tutorial](https://cue.atlassian.net/wiki/spaces/TAM/pages/844693546). #### Text for Login button Here you can enter the text that appears on the button on the login screen to log in with this external identity, e.g. “LOGIN WITH GOOGLE”. ![image-20240124-151559.png](media://0a321f5e-b5ba-424d-82c6-b8c30c3fc2b6) #### Redirect URI, Admin URI for login with external identity You will need these URI’s to set up your project in Google Workspace. For details see: [Application for apps](https://cue.atlassian.net/wiki/spaces/GWSG/pages/275612060). You can copy URI to the clipboard with the ***+*** button. #### Experimental redirect URI for Outlook add-in Outlook addin is not supported in Google Workspace, you don't need this Redirect URI for. > Macro (excerpt-include)
> Macro (excerpt) > > ### RedirectURI > > This shows the Redirect URI, which you can copy to the clipboard with the ***+*** button.