Provider-Specific Details
Microsoft Exchange Online & Hybrid
Which Microsoft 365 APIs do you use for calendaring?
Zoom calendaring integration relies on the Microsoft Graph API (MGAPI). Microsoft has begun phasing out the Exchange Web Services (EWS) methods which were previously available to connect Microsoft 365 data with Zoom services. Zoom considers these EWS methods to be legacy options.
How can I identify the official Zoom application used for conference rooms?
The conference room calendaring applications for Zoom are available in the Entra ID Enterprise Application directory and are registered with the following Application IDs, depending on your Graph API configuration method:
a651cfda-cbdd-4a39-bd03-fa829c3c1b29 (Full Delegate Access)
f56e91e5-5a82-452f-b435-d4d78aeaf064 (Application Permissions)
Zoom Recommendation
There is no need to manually add applications from the Entra ID portal. Using the Zoom web interface to request and approve permission requests will automatically add the application to your tenant.
What is the difference between Full Delegate Access and Application Permissions?
In general, Zoom recommends using Microsoft Graph API with Application Permissions, as this manner of configuration requires significantly less effort to set up and maintain on the part of the administrator, and does not require a dedicated service account. However, it does apply permissions on an account-wide scope.
Application Permissions (also known as App-only access) is Microsoft’s recommended approach for Enterprise applications that run as background services and the data required can’t be scoped to a single user.
Microsoft Graph API with Full Delegate Access is an alternative option, but requires a dedicated service account and more effort for initial setup and maintenance.
The following diagrams show the Delegated and Application-based methods with credential information in-transit.

The Delegated method, while it provides authorization, does send credentials to the Zoom App.
A more scalable method, Application-based authorization, prevents user credentials or tokens from reaching the Zoom Application directly.

How can I identify the official Zoom application used for calendaring and contact integration?
The calendaring and contact applications for Zoom are available in the Entra ID Enterprise Application directory and are registered with the following Application IDs, depending on your Graph API configuration method:
f46ceaed-fb2d-4694-803b-6341837f0ed2 (Application Permissions)
fc108d3f-543d-4374-bbff-c7c51f651fe5 (OAuth Delegated Access)
What are the limitations with Microsoft Graph API integration methods?
The Application Permissions method of calendar integration is in active development and functionality is expected to be added over time. As of this document’s publication date, the following features are not yet supported:
Multiple calendars (only the primary user calendar is supported)
Creating a calendar under Settings for your calendar
Running a search within the calendar
Including attachments
Propose a new time
Find a time
Suggested times
What kind of Entra ID consent is required?
Organizations can choose between allowing users to consent to the Zoom app accessing company data or require an administrator with Global Admin permission to first consent on behalf of the entire company. Additionally, Entra ID User Consent policies can be used to allow users to consent to apps accessing API permissions deemed “low impact” without action by administrators.
Which API permissions are required?
A key part of the consent process is allowing specific API permissions to the application. The specific permissions will differ depending on whether you use the Graph API or the EWS API, but the tables below detail the requirements for both.
Graph API for Personal Calendar and Contacts
Resource Application
Permission
Description
Reason
Microsoft Graph
offline_access
Maintain access to data you have given it access to
Enables access to refresh tokens
Microsoft Graph
openid
Sign users in
Authenticate the user and issue an access token
Microsoft Graph
Calendars.ReadWrite
Full access to user calendars
Sync calendar events
Microsoft Graph
Contacts.ReadWrite
Full access to user contacts
Sync contacts
Graph API for Conference Room Integrations
Resource Application
Permission
Description
Reason
Microsoft Graph
offline_access
Maintain access to data you have given it access to
Enables access to refresh tokens
Microsoft Graph
openid
Sign users in
Authenticate the user and issue an access token
Microsoft Graph
Calendars.ReadWrite
Full access to user calendars
Sync calendar events
Microsoft Graph
Place.Read.All
Read all company places
Gather room list
Microsoft Graph
Contacts.ReadWrite
Full access to user contacts
Sync contacts
Microsoft Exchange Server
Which Exchange Server versions are supported?
Zoom supports calendaring integration with Exchange Server 2007, 2010, 2013, 2016, and 2019.
Which authentication methods are available for Exchange Server integration?
Calendaring integration between Zoom and on-premises Exchange servers only supports using Basic authentication.
Can we avoid storing credentials?
Zoom apps can optionally use a MAPI connection to communicate with the local Outlook client for calendaring data. This method is extremely limited in that it is only available on Windows (no macOS or mobile support), it does not support contact data, and it requires the Outlook client to also be running. Additionally, users will see an Outlook security warning if the Zoom client starts prior to Outlook launching. For more information, see the support article Client-based calendar integration.
Last updated
Was this helpful?