Office 365 + GoodTime Integration Guide (O365) – GoodTime Support

Overview

This guide is a step-by-step process on how to integrate Office 365 with GoodTime. This guide is designed for Office 365 Admins with access to create security groups. This allows the GoodTime System to access to interviewer calendar events to determine which times are available for interviews.

GoodTime utilizes the Office 365 Graph API to do the following

Read/Write to calendars (write for only events created by GoodTime)
Read/Write to group or group calendars shared with individuals (write for only events created by GoodTime)
Get timezone for users
Get directory information: user’s name, email, and other profile information

Integration with the GoodTime Platform requires each user who wants to access the GoodTime system to sign in using Office 365’s OAuth login system. GoodTime authenticates using the Microsoft Graph API and requires the following permissions from the user.

High Level Diagram

Permissions we request as part of the Admin consent flow:

How to verify if we can integrate with your version of Office 365?

We support organizations on Office 365 and Office 365 Hybrid environments. To check if your Office 365 is compatible with GT, please go to https://outlook.office365.com/calendar and see if you can view your calendar on the browser. If yes, then go to https://a.goodtime.io/login and pick "Sign in with Office 365". If you can reach the "Permissions requested" page with an Accept button, then we're good. (No need to click accept for now)

Permissions Granted to GoodTime by User

Calendar Access
Permission	Use Case
Calendars.Read	Searches calendars for available times to interview
Calendars.Read.Shared	Searches calendars for available times to interview
Calendars.ReadWrite	Searches calendars for available times to interview and create calendar events
Calendars.ReadWrite.Shared	Allows the user to schedule an interview on other calendars other than their own calendar. User must first have access to calendar to do so.
Profile Access
Permission	Use Case
User.read, email, profile	Allows us to identify the current user and what organization they belong to. This does not grant access to read the mailbox.
User.ReadBasic.All	Get user info to schedule interviews (i.e. names/emails)
MailboxSettings.Read	Get user’s timezone preferences. This does not grant access to read the mailbox.
offline_access	Make sure the automated system can continue to schedule interviews even when an teammate signs off

Permissions Granted to GoodTime by Admin

Calendar Access
Permission	Use Case
Calendars.Read	Searches interviewer calendars for available times to interview
Calendars.ReadWrite	Create interviews and invite attendees
Directory Access
Permission	Use Case
Directory.Read.All	Get interviewer info to schedule interviews (i.e. names/emails)
User.Read.All	Get interviewer info to schedule interviews (i.e. names/emails)
MailboxSettings.Read	Get interviewer timezone preferences. This does not grant access to read the mailbox.
Group Access
Permission	Use Case
Group.Read.All	Schedule interviews on shared calendars

Integration Steps

The following steps will grant the GoodTime system the necessary access to create and edit interviews for employees at your company.

Admin Consent

Office 365 users who have not finished setup Admin consent to allow for interview scheduling will show an alert on the top of the Company Page (Settings Company). The alert shown in the yellow box has an email template. Copy the template and send the email to your Office 365 Administrator. They are usually in the IT department.
As an admin, click on the link provided in the email from your Talent Acquisition partner. The link will take you to an authentication page on GoodTime. Click “Continue” to authorize GoodTime to schedule interviews for your Talent Team.
If everything was successful, you will arrive on a confirmation page.
Please follow the additional steps below.

Webhook Instructions For Office 365 Admins

The following steps outline how to set up the recruiting team with access to a shared group. This allows them to write to shared recruiting calendars. In addition, this allows 2 way sync for interview events created in calendars.

Go to https://portal.office.com/AdminPortal/Home
Navigate to Groups - Groups - + Add a group
Create a group as the following
1. Type: Mail-enabled security group
2. Name: Recruiting Team GoodTime
3. Email: recruitingteamgoodtime@ (auto filled)
4. Allow people outside of my organization to send email to this distribution group: OFF
5. Add
Wait a few minutes and refresh until the group you just created shows up in the list (https://portal.office.com/AdminPortal/Home#/groups)
Click on the “Recruiting Team GoodTime” group and add GoodTime Super Admins to be owners. Ask the recruiting team who these Super Admins will be.
On the left sidebar, Groups - Shared mailboxes - + Add a mailbox
Name: GoodTime Sync, Email: goodtimesync@ (auto filled)
Add
Click on the “GoodTime Sync”
Click “edit” button next to “Members”
+ Add members
In the search box, type “recruitingteamgoodtime@”
Select “recruitingteamgoodtime@<COMPANY DOMAIN>”
Save
On the left sidebar, Groups - Shared mailboxes - + Add a mailbox
Fill in the fields
1. Name:
2. Email: @<COMPANY DOMAIN> (eg. goodtimeinterviews@goodtime.io) (auto filled)
Add
Click on the “
Click “edit” button next to “Members”
+ Add members
In the search box, type “recruitingteamgoodtime@<COMPANY DOMAIN>”
Select “recruitingteamgoodtime@<COMPANY DOMAIN>”
Save
Notify GoodTime Customer Success Manager that all steps have been completed.

Office365 Hybrid Deployments for Exchange Server On-Premises

GoodTime.io can support on-premise Outlook if it is configured for the hybrid deployment option. Please send your IT team that manages the Exchange server the following documentation to confirm if the hybrid deployment is currently available or is on the roadmap.

Microsoft Documentation

https://docs.microsoft.com/en-us/office365/enterprise/hybrid-modern-auth-overview