# Connect Microsoft Entra ID for email and calendar sync

URL: https://attio.com/help/reference/workspace-settings-billing/attio-and-microsoft-entra-id
Breadcrumbs: [Help](https://attio.com/help) > [Reference](https://attio.com/help/reference) > [Workspace settings & billing](https://attio.com/help/reference/workspace-settings-billing)

Grant admin consent for Microsoft email and calendar.

This article outlines the steps a Microsoft Entra ID admin can take to add Attio as an enterprise application. This setup is required if users encounter a **"**Need admin approval" message when trying to [sync their Outlook email and calendar](https://attio.com/help/reference/email-calendar/email-and-calendar-syncing)** **with Attio.

> **Note: **To automate member provisioning and deprovisioning in Attio using Microsoft Entra, see [Set up SCIM with Microsoft Entra](https://attio.com/help/reference/workspace-settings-billing/security/set-up-scim-with-microsoft-entra).

A Microsoft Entra admin can follow these steps:

- First, get the relevant Microsoft 365 tenant ID from [Entra.](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/TenantOverview.ReactView)

![](https://a.storyblok.com/f/234930/1717x1328/1c07c3f249/entra-tenant-id.png)

- Assuming the application is not currently installed, you will see this:

![](https://a.storyblok.com/f/234930/1716x1332/96d2c93ee6/enterprise-application-not-installed.png)

- Copy the tenant ID and substitute it in place of the TENANT_ID placeholder in the URL below.

```plaintext
https://login.microsoftonline.com/{{TENANT_ID}}/v2.0/adminconsent?client_id=285a2b1b-e59e-4db2-a862-e0d06751e637&scope=openid%20profile%20offline_access%20https%3A%2F%2Fgraph.microsoft.com%2FUser.Read%20https%3A%2F%2Fgraph.microsoft.com%2FMail.Read%20https%3A%2F%2Fgraph.microsoft.com%2FCalendars.ReadWrite%20https%3A%2F%2Fgraph.microsoft.com%2FMail.ReadWrite%20https%3A%2F%2Fgraph.microsoft.com%2FMail.Send%20https%3A%2F%2Foutlook.office.com%2FSMTP.Send&redirect_uri=https%3A%2F%2Fapp.attio.com%2Fintegrations%2Fmailbox%2Fexchange%2Fauth%2Fresponse
```

- When you visit the URL, you should be presented with this screen:

![](https://a.storyblok.com/f/234930/544x852/07903802f1/attio-permissions-requested.png)

- Click “Accept” to install the application. You will see an error screen, which is expected. You can now leave the page.

![](https://a.storyblok.com/f/234930/1716x1328/4849d59ea6/error-adding-application.png)

- The application should now appear in Entra, and can be assigned to the relevant Entra users or groups as necessary.

![](https://a.storyblok.com/f/234930/1715x1284/efa69bd6e4/attio-app-in-entra.png)

This should be the Application ID: 285a2b1b-e59e-4db2-a862-e0d06751e637

- The user should now be able to [sync their Microsoft email and calendar account](https://attio.com/help/reference/email-calendar/email-and-calendar-syncing) with Attio.

> **Note:** If you would also like to set up Single Sign-On (SSO), [follow these steps](https://attio.com/help/reference/workspace-settings-billing/single-sign-on). SSO is only available on Attio's [Enterprise plan](https://attio.com/pricing).