Microsoft
Agoo's Microsoft app signs people in with Microsoft and connects Outlook and Microsoft 365 calendars for busy times, bookings and Teams links. What it asks for, how your IT team approves it, and how to remove it.
Agoo is in early access. This page describes the feature as it ships to early-access organisations; screens are illustrative.
Agoo uses one Microsoft app, called Agoo, open to every Microsoft organisation and to personal Microsoft accounts. It does two things, each asking for its own access only when someone chooses it:
| What | Who uses it | Plans | Guide |
|---|---|---|---|
| Sign in with Microsoft to the Console and Agoo Workspace, and sign up | Staff, and Owners starting an organisation | Every plan, Free included | Single sign-on |
| Outlook and Microsoft 365 calendars: busy times, bookings in Outlook, Teams links | Hosts who take bookings | Starter, Growth, Pro, Enterprise | Connect your calendar |
Which accounts work
| Account | Sign in | Calendar | Teams links |
|---|---|---|---|
| Microsoft 365 work or school, with Exchange Online | Yes | Yes | Yes |
| Microsoft 365 work or school, with no Outlook mailbox | Yes | No: Agoo stops using it | No |
| Personal Microsoft account (Outlook.com, Hotmail, Live) | Added by the person from Sign-in and security, unless your organisation turns off personal accounts | Yes | No |
Agoo reads and writes calendars through the Outlook mailbox, so a calendar needs Outlook.com or Microsoft 365 with Exchange Online. Some accounts have no such mailbox: accounts made only for Teams or Microsoft's developer tools, unlicensed users, and mailboxes kept on an organisation's own servers. When one is connected, its card says "This Microsoft account has no Outlook mailbox" and Agoo stops using it (no busy times, events or Teams links; reconnecting doesn't help). The person disconnects it and connects a Microsoft 365 account with Exchange Online, or an Outlook.com account.
What the app asks for
Signing in
| Microsoft permission | What Microsoft shows | Why Agoo needs it |
|---|---|---|
openid | Sign you in | To know it's the same Microsoft account each time |
profile | View your basic profile | Your name, and for work and school accounts your organisation |
email | View your email address | To match the account to an Agoo account whose email Microsoft confirms (the xms_edov claim for work accounts) |
Signing in keeps no access to anything in your Microsoft account afterwards: no mail, contacts, files or calendar.
Connecting a calendar
| Microsoft permission | What Microsoft shows | Why Agoo needs it |
|---|---|---|
Calendars.ReadWrite | Have full access to your calendars | To list the person's calendars, read busy times from the ones they choose, and add, move and remove the events for their confirmed bookings, with Teams links |
offline_access | Maintain access to data you have given it access to | To check the calendar and update events when the person isn't signed in |
openid, profile, email | As above | To show which account is connected |
When an administrator approves Agoo for a whole organisation, Microsoft also lists OnlineMeetings.ReadWrite (create and read online meetings), so Teams meetings can be made for bookings.
Microsoft names the calendar permission "full access", but Agoo uses it narrowly. What Agoo keeps: each calendar's name and colour; busy start and end times only (never subjects, attendees or bodies), deleted a day after they end; the IDs of the events Agoo added. It only ever changes events it added, and never invites anyone from the calendar. Tokens are encrypted and never shown to anyone. Changes in the calendar reach Agoo within seconds, and Agoo also looks every 15 minutes. The privacy notice has the details.
Approve Agoo for your whole organisation (Microsoft 365 admins)
If your Microsoft 365 doesn't let staff consent to apps themselves, Microsoft says the app needs an administrator's approval. In Agoo, a calendar card says Needs your IT team, and signing in says your organisation's IT needs to approve Agoo in Microsoft first. An administrator can approve Agoo once, for everyone, before or after anyone connects. After that, staff connect their Outlook calendars without a consent screen. There are two ways.
In Agoo
An Owner or Admin of your Agoo organisation who is also your Microsoft 365 global administrator opens Console → Settings → Calendars and chooses Approve for everyone at your organisation. Microsoft asks them to sign in and accept Agoo's permissions on behalf of the organisation (above, including OnlineMeetings.ReadWrite), then sends them back to Agoo.
In the Microsoft Entra admin center
Open the Microsoft Entra admin center
Sign in at entra.microsoft.com as a Cloud Application Administrator, Application Administrator or Global Administrator.
Find Agoo
Go to Identity → Applications → Enterprise applications and search for Agoo. If your organisation uses admin consent requests, open Admin consent requests instead and review the request your colleague sent.
Grant consent
Open Permissions and select Grant admin consent for your organisation. Review the permissions (above) and accept.
Afterwards
Staff connect without a consent screen. Anyone whose card said Needs your IT team selects Connect again in Account → Calendars, or signs in with Microsoft again.
Teams links also need the person's calendar to allow Teams meetings, which your Exchange Online settings decide. To limit sign-in to your own Microsoft organisation, an Owner or Admin chooses Add the organisation I'm signed in to in Console → Settings → Security → Sign in with Google and Microsoft (Your organisation's rules).
Remove Agoo
In Agoo:
- Sign-in: Your account → Sign-in and security → Sign-in methods → remove Microsoft. You can't remove the way you're signed in with now: sign in another way first.
- Calendar: Account → Calendars → the Microsoft 365 card → Disconnect, with Remove the events Agoo added (recommended) ticked to remove upcoming events. Agoo stops at once and deletes the busy times, list of calendars and tokens.
In your Microsoft account: Microsoft doesn't let apps remove their own access, so to remove Agoo there too (the disconnect dialog links to it):
- Work or school account: open myaccount.microsoft.com, then your apps and their permissions, and remove Agoo.
- Outlook.com account: open account.live.com/consent/Manage and remove Agoo.
If you remove it there without disconnecting in Agoo, the calendar card says Reconnect needed: disconnect it in Agoo to delete what Agoo kept. Events Agoo already added stay in your calendar until you delete them.
For the whole organisation: in the Entra admin center, open Enterprise applications → Agoo, then Properties, and set Enabled for users to sign-in to No, or delete the app to remove every grant.
If something doesn't work
| What you see | What to do |
|---|---|
| Microsoft says the app needs an administrator's approval | Approve Agoo for your whole organisation. |
| The calendar card says "This Microsoft account has no Outlook mailbox" | Disconnect it, then connect a Microsoft 365 account with Exchange Online or an Outlook.com account. |
| No Teams link on a booking: "We couldn't make the Microsoft Teams link" | Teams links need a work or school account whose calendar allows Teams meetings. Choose Add your own link, or ask your IT team. |
| "Microsoft didn't confirm this email belongs to you" when signing in | Sign in with your password or an email code, then add Microsoft from Sign-in and security. |
| "(Your organisation) only allows Microsoft accounts from its own organisation" | Choose your work account, or use your password or an email code. |
More in Connect your calendar and SSO and SCIM.
Support
Questions about Agoo's Microsoft app go to agoo@ardentafrica.com, +233 30 398 3393 or the contact form; we reply within one working day. Read our privacy notice and terms.
Agoo's Google app signs people in with Google and connects Google Calendar for busy times, bookings and Google Meet links. What it asks for, how your IT team approves it, and how to remove it.
Zoom
Agoo's Zoom app makes a Zoom meeting for each video booking, in the host's own Zoom account. How to add it, use it and remove it, and what it can see.