The first permission (read all users's basic profiles) is only requested from the SuperOffice administrator in order to load the list of available users.
SynchronizerTo use the Synchronizer for SuperOffice the following requirements must be met: |
Note: You can use our Check site to automatically validate your environment, see Synchronizer Check site
A (demo) subscription of Synchronizer. Subscriptions are handled by SuperOffice, please contact your SuperOffice contact or partner. To sign up, follow this link: Synchronizer registration
A SuperOffice CRM login name with administrator rights
SuperOffice CRM Onsite 9.x and higher (see here for requirements)
Microsoft Exchange 2016
Microsoft Exchange 2019
Microsoft 365
When you want to use Microsoft 365 and you want to use Synchronizer for SuperOffice, please make sure you have the correct Microsoft 365 Plan. Not all plans have the Exchange component which we need for synchronization.
The following Microsoft 365 plans are supported:
Microsoft 365 Business Basic
Microsoft 365 Business Standard
Microsoft 365 Business Premium
The Microsoft 365 Apps do not have the required hosted Exchange component, meaning these types of plans can not be used with the Synchronizer.
For more information on the difference between pricing plans click here or here
Please note: IMAP & POP3 accounts are not supported. The IMAP/POP3 protocols do not have support for calendaring and only cover email synchronization.
Please note: Authentication using a solution like Citrix Netscaler is not supported.
TLS 1.2 is supported. Please note that support for TLS 1.0 and TLS 1.1 is dropped since these protocols are not considered secure by Microsoft due to several breaches in the last couple of years: https://www.digicert.com/blog/depreciating-tls-1-0-and-1-1/
If you have TLS 1.0 and 1.1 enabled, it means that the Synchronizer will stop working in the near future. Please note: this is an insecure situation! See Update on unsecured TLS protocols
Supported Windows versions with TLS 1.2 support: https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls#support-for-tls-12
Note Windows Server 2008 and Windows Server 2008 R2 Are no longer supported. More info
2-factor authentication is not supported.
When connecting to Microsoft 365 the Synchronizer uses OAuth. The SuperOffice Application Administrator can set up synchronization for each user. Each user will receive an email and can initiate the OAuth process to give access to its mailbox.
No changes or actions are needed in the Synchronizer when using multifactor authentication or conditional access in Microsoft 365 / Azure AD because this only affects the OAuth process on the Microsoft side and not the application side.
When using MFA (Multi-Factor Authentication) in Microsoft 365 nothing special needs to be configured. Only when the Microsoft 365 admin has turned on the option for "integrated apps" or "approval for apps" you need to add the Synchronizer application ID
The Synchronizer application ID is 32f1d4ba-7de3-40c3-bf1c-7ddf725eab8c
In total the following permissions are requested:
The first permission (read all users's basic profiles) is only requested from the SuperOffice administrator in order to load the list of available users.
The Exchange Autodiscover must function for correct configuration (KB article). Please make sure before signing up for an account!
When Autodiscover cannot be used due to technical or security reasons we have an advanced option where you can manually add the EWS (Exchange Web Service) and the OAB (Offline Address Book) URLs. More Info
Please note: The Google Administrator needs to add the Synchronizer as a trusted app to the Admin API permissions and the Synchronization administrator(s) needs to have the role Help Desk Admin or higher (only for G Suite).
The following clients are successfully tested in combination with the Synchronizer:
Microsoft Outlook 2013 and higher
Outlook Web Access
Various other contacts/calendar systems either connected to Exchange or Google
OSX 10.11 El Capitan and higher
Calendar for Mac (connected to Exchange or Google)
Contacts for Mac (connected to Exchange or Google)
Various other contacts/calendar systems either connected to Exchange or Google
Microsoft Microsoft 365 (Business Premium / Business Essentials / Enterprise / Government plan)
Please note: Microsoft 365 Home, Personal, ProPlus and regular Business are not supported, as these plans do not have the Exchange Online component. Compare the Microsoft 365 Business plans here.
Basically, all mobile devices like mobile phones, tablets, etc. are supported as long the installed applications connect to an Exchange or Google environment.
Note for Windows: All the used clients are connected to a supported Microsoft Exchange environment
Note for Mac OSX: All the used clients are connected to a supported Microsoft Exchange or Google environment. iCloud is not supported!
Once a customer has an account the administrator can log in to Synchronizer and create a Profile. Within the Profile, all settings can be administered and users can be added here.
Users can log in to their own Synchronizer portal. For this SuperOffice credentials are needed. An administrator can also log in with a username and a password.
Please note: AD authentication is not supported
The Synchronizer uses the following IP address to connect to your Exchange, Microsoft 365 or Google Server: 137.116.207.182
The IP address used by Synchronizer will change on October 18, 2023. The new IP address is: 20.224.254.27 If you have set up your firewall to whitelist Synchronizer’s IP address, then please update the whitelist by adding this new IP address before the motioned date and remove the old IP address shortly after the mentioned date. |