Provider-Specific Details

Microsoft Exchange Online & Hybrid

Which Microsoft 365 APIs do you use for calendaring?

Zoom calendaring integration relies on the Microsoft Graph API (MGAPI). Microsoft has begun phasing out the Exchange Web Services (EWS) methods which were previously available to connect Microsoft 365 data with Zoom services. Zoom considers these EWS methods to be legacy options.

How can I identify the official Zoom application used for conference rooms?

The conference room calendaring applications for Zoom are available in the Entra ID Enterprise Application directory and are registered with the following Application IDs, depending on your Graph API configuration method:

• a651cfda-cbdd-4a39-bd03-fa829c3c1b29 (Full Delegate Access)

• f56e91e5-5a82-452f-b435-d4d78aeaf064 (Application Permissions)

Zoom Recommendation

There is no need to manually add applications from the Entra ID portal. Using the Zoom web interface to request and approve permission requests will automatically add the application to your tenant.

What is the difference between Full Delegate Access and Application Permissions?

In general, Zoom recommends using Microsoft Graph API with Application Permissions, as this manner of configuration requires significantly less effort to set up and maintain on the part of the administrator, and does not require a dedicated service account. However, it does apply permissions on an account-wide scope.

Application Permissions (also known as App-only access) is Microsoft’s recommended approach for Enterprise applications that run as background services and the data required can’t be scoped to a single user.

Microsoft Graph API with Full Delegate Access is an alternative option, but requires a dedicated service account and more effort for initial setup and maintenance.

The following diagrams show the Delegated and Application-based methods with credential information in-transit.

The Delegated method, while it provides authorization, does send credentials to the Zoom App.

A more scalable method, Application-based authorization, prevents user credentials or tokens from reaching the Zoom Application directly.

How can I identify the official Zoom application used for calendaring and contact integration?

The calendaring and contact applications for Zoom are available in the Entra ID Enterprise Application directory and are registered with the following Application IDs, depending on your Graph API configuration method:

• f46ceaed-fb2d-4694-803b-6341837f0ed2 (Application Permissions)

• fc108d3f-543d-4374-bbff-c7c51f651fe5 (OAuth Delegated Access)

What are the limitations with Microsoft Graph API integration methods?

The Application Permissions method of calendar integration is in active development and functionality is expected to be added over time. As of this document’s publication date, the following features are not yet supported:

• Multiple calendars (only the primary user calendar is supported)

• Creating a calendar under Settings for your calendar

• Running a search within the calendar

• Including attachments

• Propose a new time

• Find a time

• Suggested times

What kind of Entra ID consent is required?

Organizations can choose between allowing users to consent to the Zoom app accessing company data or require an administrator with Global Admin permission to first consent on behalf of the entire company. Additionally, Entra ID User Consent policies can be used to allow users to consent to apps accessing API permissions deemed “low impact” without action by administrators.

Zoom Recommendation

Select the most appropriate option for your organization. Avoid the option to allow users to request admin consent to specific requests, because this workflow may not apply permissions correctly.

Your organization may choose to restrict or allow user consent settings. Zoom recommends a simplified permissions method of allowing users to consent to Entra ID apps themselves. However, whichever choice you make, your organization must match the Entra ID option with a paired option on the Zoom administration side.

Which API permissions are required?

A key part of the consent process is allowing specific API permissions to the application. The specific permissions will differ depending on whether you use the Graph API or the EWS API, but the tables below detail the requirements for both.

Graph API for Personal Calendar and Contacts

Resource Application	Permission	Description	Reason
Microsoft Graph	offline_access	Maintain access to data you have given it access to	Enables access to refresh tokens
Microsoft Graph	openid	Sign users in	Authenticate the user and issue an access token
Microsoft Graph	Calendars.ReadWrite	Full access to user calendars	Sync calendar events
Microsoft Graph	Contacts.ReadWrite	Full access to user contacts	Sync contacts

Graph API for Conference Room Integrations

Resource Application	Permission	Description	Reason
Microsoft Graph	offline_access	Maintain access to data you have given it access to	Enables access to refresh tokens
Microsoft Graph	openid	Sign users in	Authenticate the user and issue an access token
Microsoft Graph	Calendars.ReadWrite	Full access to user calendars	Sync calendar events
Microsoft Graph	Place.Read.All	Read all company places	Gather room list
Microsoft Graph	Contacts.ReadWrite	Full access to user contacts	Sync contacts

Microsoft Exchange Server

Which Exchange Server versions are supported?

Zoom supports calendaring integration with Exchange Server 2007, 2010, 2013, 2016, and 2019.

Which authentication methods are available for Exchange Server integration?

Calendaring integration between Zoom and on-premises Exchange servers only supports using Basic authentication.

Can we avoid storing credentials?

Zoom apps can optionally use a MAPI connection to communicate with the local Outlook client for calendaring data. This method is extremely limited in that it is only available on Windows (no macOS or mobile support), it does not support contact data, and it requires the Outlook client to also be running. Additionally, users will see an Outlook security warning if the Zoom client starts prior to Outlook launching. For more information, see the support article Client-based calendar integration.