# Configure OAuth Authentication

This section describes how to configure OAuth authentication, so that the connector can retrieve information from Exchange Online.

NOTE: There is no need to complete this procedure if you ran the OAuth configuration tool during the installation procedure.

To configure OAuth authentication

1. Open the folder where you installed the connector.
2. Open the file `oauth_tool.cfg` in a text editor.

3. In the `[Default]` section, specify any SSL or proxy settings required to access Exchange Online:

   `SSLMethod` | The version of SSL/TLS to use.
   `ProxyHost` | The host name or IP address of the proxy server that the connector must use.
   `ProxyPort` | The port of the proxy server that the connector must use.

   For example:

       SSLMethod=NEGOTIATE
       ProxyHost=10.0.0.1
       ProxyPort=8080

4. Decide whether to retrieve data for a single user or an organization.

   - To retrieve information from a single user, find the `[OAuthTool_singleUser]` section, and set the following parameters:

     `AppKey` | The application key you obtained when you created the application to represent the connector (see Create an OAuth Application).
     `AppSecret` | The application secret you obtained when you created the application to represent the connector.

   - To retrieve information for an organization, find the `[OAuthTool]` section, and set the following parameters:

     `AppKey` | The application key you obtained when you created the application to represent the connector (see Create an OAuth Application).
     `AppSecret` | The application secret you obtained when you created the application to represent the connector.
     `AdminConsentUrl` | Replace the placeholder `{tenant}` with your Microsoft Tenant ID.
     `TokenUrl` | Replace the placeholder `{tenant}` with your Microsoft Tenant ID.

5. Save and close the file.

6. Open a command-line window and run the following command:

   - To retrieve information from a single user:

         oauth_tool.exe oauth_tool.cfg OAuthTool_singleUser

   - To retrieve information for an organization:

         oauth_tool.exe oauth_tool.cfg OAuthTool

   Your default web browser opens to the Microsoft web site.

7. Authorize the application to access the API. You must use the username and password of an account that has permission to view everything that you want to ingest (such as an administrator account).

   Microsoft provides the OAuth tokens, and the OAuth configuration tool creates a file named `oauth.cfg`. This contains the parameters that the connector requires to authenticate. These parameters are automatically included in the connector configuration file, because the connector configuration file includes the following line to import the parameters into the task configuration section:

       [MyTask1] < "oauth.cfg" [OAUTH]

   For more information about including parameters from another file, see Include an External Configuration File. The OAuth tool also prints the parameters it has set to the command-line window so that you can set these directly in the connector's configuration file if you prefer.

_FT_HTML5_bannerTitle.htm