Microsoft Graph Service
Overview
The Microsoft Graph Service connects B2Win Suite to Microsoft 365 through Microsoft Graph. It is used by SharePoint, Outlook, OneDrive, and Teams integrations that need an authenticated Graph client.
Purpose
Use this service when workflows need to:
- Read, copy, or monitor files in SharePoint document libraries.
- Send email through Outlook.
- Authenticate Microsoft 365 operations through OAuth.
Setup Guide
Before configuring the service in B2Win Suite, complete the Microsoft Entra setup in Microsoft Graph Service Setup.
Configure in B2Win Suite
Go to Configurations > Services and open Microsoft Graph Service. Create a new configuration or edit an existing one.
| Field | Required | Description |
|---|---|---|
| Tenant ID | Yes | Microsoft Entra tenant ID. |
| App Client Id | Yes | Application client ID from the app registration. |
| App Client Secret | Yes | Client secret value from Certificates & secrets. |
After saving the values, click Authorize and complete the Microsoft sign-in flow. The OAuth redirect URI must match the URI configured in Microsoft Entra.
For administrator override settings, see Services Configuration. For user-specific settings, see My Services.
Usage
Once configured, this service can be selected in Microsoft-related nodes, including:
- Copy File (SharePoint) - upload files to SharePoint.
- Read File (SharePoint) - retrieve files from SharePoint.
- File Listener (SharePoint) - start a workflow when a SharePoint file changes.
- Send Email (Outlook) - send email through Microsoft Graph.
Example
Use a Microsoft Graph service to send generated invoices to SharePoint and email a notification:
- Configure the service with a Microsoft Entra tenant, app client ID, and app client secret.
- Click Authorize and sign in with an account that can access the target SharePoint site and send mail.
- Use Copy File (SharePoint) to upload the invoice file to a document library.
- Use Send Email (Outlook) to notify the finance team that the file is available.
Troubleshooting
- Confirm the redirect URI in Microsoft Entra exactly matches your B2Win Suite URL plus
/services/oauth2callback. - Verify that administrator consent was granted for the permissions used by your nodes.
- Recreate and update the client secret if it has expired.
- Reauthorize the service if Microsoft sign-in state is missing, expired, or revoked.
- Confirm the configured account has access to the target SharePoint sites, drives, mailboxes, or Teams resources.
Notes / Limitations
- The service uses OAuth and stores authorization state with the service configuration.
- The service configuration form exposes Tenant ID, App Client Id, and App Client Secret.
- Microsoft Graph access is still limited by the permissions granted to the app and the signed-in account.