Requirements and checklist before use

Owned by Thomas Speekenbrink
Last updated: Jul 08, 2024 by Remco Visser
3 min read



Synchronizer

To use the Synchronizer for SuperOffice the following requirements must be met:

Note: You can use our Check site to automatically validate your environment, see Synchronizer Check site

Subscription 

  1. A (demo) subscription of Synchronizer. Subscriptions are handled by SuperOffice, please contact your SuperOffice contact or partner. To sign up, follow this link: Synchronizer registration

  2. A SuperOffice CRM login name with administrator rights

SuperOffice Versions:

Microsoft Exchange:

  • Microsoft Exchange 2016

  • Microsoft Exchange 2019

  • Microsoft 365 

    When you want to use Microsoft 365 and you want to use Synchronizer for SuperOffice, please make sure you have the correct Microsoft 365 Plan. Not all plans have the Exchange component which we need for synchronization.

    The following Microsoft 365 plans are supported:

    • Microsoft 365 Business Basic

    • Microsoft 365 Business Standard

    • Microsoft 365 Business Premium

    The Microsoft 365 Apps do not have the required hosted Exchange component, meaning these types of plans can not be used with the Synchronizer.

    For more information on the difference between pricing plans click here or here

Please note: IMAP & POP3 accounts are not supported. The IMAP/POP3 protocols do not have support for calendaring and only cover email synchronization.

Please note: Authentication using a solution like Citrix Netscaler is not supported.

TLS 1.2

TLS 1.2 is supported. Please note that support for TLS 1.0 and TLS 1.1 is dropped since these protocols are not considered secure by Microsoft due to several breaches in the last couple of years: https://www.digicert.com/blog/depreciating-tls-1-0-and-1-1/

If you have TLS 1.0 and 1.1 enabled, it means that the Synchronizer will stop working in the near future. Please note: this is an insecure situation! See Update on unsecured TLS protocols

Supported Windows versions

Supported Windows versions with TLS 1.2 support: https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls#support-for-tls-12
Note Windows Server 2008 and Windows Server 2008 R2 Are no longer supported. More info

2-factor authentication for Exchange & Hosted Exchange

2-factor authentication is not supported.

Multi-Factor Authentication for Microsoft 365

When connecting to Microsoft 365 the Synchronizer uses OAuth. The SuperOffice Application Administrator can set up synchronization for each user. Each user will receive an email and can initiate the OAuth process to give access to its mailbox.

No changes or actions are needed in the Synchronizer when using multifactor authentication or conditional access in Microsoft 365 / Azure AD because this only affects the OAuth process on the Microsoft side and not the application side.

When using MFA (Multi-Factor Authentication) in Microsoft 365 nothing special needs to be configured. Only when the Microsoft 365 admin has turned on the option for "integrated apps" or "approval for apps" you need to add the Synchronizer application ID

The Synchronizer application ID is 32f1d4ba-7de3-40c3-bf1c-7ddf725eab8c

In total the following permissions are requested:


The first permission (read all users's basic profiles) is only requested from the SuperOffice administrator in order to load the list of available users.                                                     

Autodiscover

The Exchange Autodiscover must function for correct configuration (KB article). Please make sure before signing up for an account!
When Autodiscover cannot be used due to technical or security reasons we have an advanced option where you can manually add the EWS (Exchange Web Service) and the OAB (Offline Address Book) URLs. More Info

Google

Please note: The Google Administrator needs to add the Synchronizer as a trusted app to the Admin API permissions and the Synchronization administrator(s) needs to have the role Help Desk Admin or higher (only for G Suite).

Supported Clients

The following clients are successfully tested in combination with the Synchronizer:

Windows

  • Microsoft Outlook 2013 and higher

  • Outlook Web Access

  • Various other contacts/calendar systems either connected to Exchange or Google

Apple Mac OSX

  • OSX 10.11 El Capitan and higher

  • Calendar for Mac (connected to Exchange or Google)

  • Contacts for Mac (connected to Exchange or Google)

  • Various other contacts/calendar systems either connected to Exchange or Google

  • Microsoft Microsoft 365 (Business Premium / Business Essentials / Enterprise / Government plan)
    Please note: Microsoft 365 Home, Personal, ProPlus and regular Business are not supported, as these plans do not have the Exchange Online component. Compare the Microsoft 365 Business plans here.

Mobile Devices

  • Basically, all mobile devices like mobile phones, tablets, etc. are supported as long the installed applications connect to an Exchange or Google environment.

Note for Windows: All the used clients are connected to a supported Microsoft Exchange environment
Note for Mac OSX: All the used clients are connected to a supported Microsoft Exchange or Google environment. iCloud is not supported!

The Portal

Once a customer has an account the administrator can log in to Synchronizer and create a Profile. Within the Profile, all settings can be administered and users can be added here.
Users can log in to their own Synchronizer portal. For this SuperOffice credentials are needed. An administrator can also log in with a username and a password. 
Please note: AD authentication is not supported

Connection - Firewall:

The Synchronizer uses the following IP address to connect to your Exchange, Microsoft 365 or Google Server: 20.224.254.27