Connecting Whisperit to your Outlook & SharePoint: Authorization Guide

Whisperit can connect to your Outlook mailbox and your SharePoint / OneDrive files so you can work directly from your existing documents and emails. To enable this, your organization's Microsoft 365 environment needs a one-time authorization by an administrator. This page explains exactly what to do.

Last updated 12 days ago

Who needs to do this?

If you are a Whisperit user: you most likely cannot complete these steps yourself, they require Microsoft 365 administrator rights. The simplest path is to forward this page to your IT administrator or IT provider and ask them to perform the one-time authorization below.

If your firm manages its own Microsoft 365 (you are the administrator): you can perform the steps yourself. Go straight to Steps for the administrator.

Background (why this is needed)

Whisperit is a multi-tenant Entra ID (Azure AD) application. It does not need to be published in the Microsoft application gallery (AppSource) to work in your environment. It's normal that it isn't listed there, and there is nothing to "add" manually.

Until an administrator grants consent, the application won't appear in your Enterprise applications — this is expected. Once consent is granted, it is created there automatically and becomes usable by all your users.

The blue ✓ next to "Whisperit SA" on the consent screen is the Microsoft Verified Publisher badge: Microsoft has verified our publisher identity.

Steps for the administrator

You need an account with one of these roles: Global Administrator, Application Administrator, Cloud Application Administrator, or Privileged Role Administrator.

Option A: Admin consent link (recommended, ≈ 2 minutes)

Open the link below in a browser, sign in with the admin account, review the requested permissions, and click Accept.

The link uses common, so Microsoft automatically resolves the correct tenant from the admin's account — you don't need to know or enter your domain or tenant ID.

Outlook + SharePoint / OneDrive connection (WhisperIt SharePoint Connector):

https://login.microsoftonline.com/common/adminconsent?client_id=af39796b-5774-4c2b-836d-b4d85f1b74f2 

If your users also need dashboard sign-in authorized, here is the second application (WhisperIt SSO) — to be approved separately:

https://login.microsoftonline.com/common/adminconsent?client_id=8581f9ba-8a61-4261-9063-ec5cd7bc6127 

Each application is consented to separately — approving one does not approve the other. To target your tenant explicitly instead of common, replace common with your domain (e.g. contoso.com) or your tenant GUID.

Once consent is granted, the app appears in Entra ID → Enterprise applications and all users can connect normally.

Permissions requested (Outlook + SharePoint connector)

All permissions are delegated: Whisperit only acts on behalf of the signed-in user, never with standalone app-only access.

  • User.Read, email, offline_access — basic sign-in

  • Files.Read.All — read files the user already has access to

  • Sites.Read.All — read SharePoint sites the user has access to

  • Mail.Read, Mail.ReadWrite, Mail.Send — Outlook integration

Option B — Approve from the Azure portal

If you prefer to inspect and approve the application from the portal instead of via a link:

  1. Provision the application first: have any user attempt to sign in to Whisperit once. The "admin approval required" screen is enough to register the application in your tenant (they can then close the window). Without this step, the application won't show up in search — this is the most common cause of "I can't find Whisperit."

  2. Sign in to https://portal.azure.com with an admin account → Microsoft Entra IDEnterprise applicationsAll applications, set the filter to "Enterprise Applications" and search for Whisperit.

  3. Open the application → Permissions tab → Grant admin consent for [organization] → review and click Accept.

Repeat for each application if both the SharePoint Connector and the SSO app are needed.

Verify it worked

In Entra ID → Enterprise applications → [the app] → Permissions, you should see "Admin consent granted." On the user side, the Outlook/SharePoint connection then works without prompting for a code again.

If something doesn't work

  • "I clicked the link, signed in, and got an error." The signed-in account likely doesn't have one of the required admin roles. Confirm the role and retry.

  • "User declined to consent" (AADSTS65004). Cancel was clicked on the consent screen — simply reopen the link.

  • "The grantor cannot consent to permissions in this tenant" (AADSTS90094). Admin consent is blocked at the tenant level for some scopes (Conditional Access or a custom policy). Your tenant security team needs to allow it.

  • "Grant admin consent" is greyed out. The signed-in account doesn't have a role with consent privileges (Global / Application / Cloud Application / Privileged Role Administrator).

  • App not found in Enterprise applications. Provisioning wasn't done (no sign-in attempted yet), or a different app was triggered. Have a user retry the sign-in, then refresh the portal.

Still stuck? Contact us at support@whisperit.ai or 021 539 46 60. Feel free to copy your Whisperit contact, and include any AADSTS error code you see.