Connect an organization-wide Outlook account

An organization-wide Outlook account is the recommended way to connect Microsoft 365 to Tekst. A Microsoft 365 administrator grants Tekst tenant-wide access once, and Tekst then connects to mailboxes using application-level access that is not tied to any individual's sign-in. This means the connection keeps working when passwords are rotated or MFA is introduced.

For a comparison of this option with a personal account, see the "Outlook integration: personal vs organization-wide accounts" article.

What you need

• A Microsoft 365 administrator who can grant tenant-wide (admin) consent.
• Permission to add integrations in Tekst.

You do not need to register an application in Azure, create a client secret, or set up a dedicated mailbox or "service" user with MFA disabled. Tekst publishes its own Microsoft enterprise application, and the only thing the integration stores for an organization-wide connection is your tenant identifier. Granting consent is all that is required.

If your organization would rather connect through an app registration in its own Microsoft Entra tenant, see Connect an organization-wide Outlook account with your own app registration.

Step 1: Start the connection in Tekst

1. In Tekst, open Integrations from the navigation menu.

2. Click Connect Integration in the top-right corner.

3. Click Connect on the Outlook card.

4. When asked to choose an account type, select Organization-wide Outlook account and click Next.

   

5. On the Service Account step, keep Tekst's Microsoft app selected, optionally enter your Tenant (for example contoso.onmicrosoft.com), then click Connect Service Account.

   

Step 2: Grant admin consent in Microsoft 365

1. Tekst redirects you to Microsoft's consent screen. Sign in with an account that has administrator rights for your tenant.
2. Review the permissions Tekst is requesting. These are the application permissions described in Microsoft Graph permissions Tekst requests and how to restrict them.
3. Accept on behalf of your organization. Microsoft records the consent for your tenant and returns you to Tekst automatically.

If consent is not granted by an administrator, the connection cannot be completed and Tekst shows a "Could not connect your integration" message.

Step 3: Choose which mailboxes to process

By default, an organization-wide connection can reach every mailbox in your tenant. We strongly recommend restricting it to only the mailboxes Tekst needs to process. See Restrict Tekst to specific mailboxes.

You can then add the individual mailboxes Tekst should monitor on the Mailboxes step of the setup wizard. Enter one or several addresses, separated by commas, and click Add. You can add more later. See Add shared and child mailboxes.

To also narrow what Tekst may do in the mailboxes it reaches, an administrator can revoke permissions it does not need. See Microsoft Graph permissions Tekst requests and how to restrict them.

Step 4: Finish setup

On the Email History step, choose whether Tekst should also pull in older emails by enabling Backfill, then click Complete Setup.

Once finished, the integration status changes to Connected and Tekst begins syncing.

If the connection does not complete or later stops syncing, see the "Troubleshoot the Outlook integration" article.