Perform the following steps to enable the WPO365 REST API for Microsoft Graph and allow client-side (= browser based) applications to request Exchange calendar events from its /users and /groups endpoints.
When you embed an Outlook / Exchange Calendar in WordPress, WPO365 injects a small JavaScript application in the page. This client-side (= browser based) application will then try to create a connection to your WordPress server to request data from the WPO365 REST API for Microsoft Graph. Requests received by this API are first security-checked and then transparently forwarded to Microsoft Graph.
By default is the WPO365 REST API for Microsoft Graph not enabled.
- Go to WP Admin > WPO365 > Integration and scroll to the section Microsoft 365 Apps.
- Check the option to Enable WPO365 REST API for Microsoft Graph.
- Since users will have to sign in with Microsoft prior to accessing the WPO365 REST API for Microsoft Graph you should select Users must be signed in with Microsoft from the dropdown Require users to sign-in to use the WPO365 REST API for Microsoft Graph.
- Continue by allow-listing the following endpoints
- https://graph.microsoft.com/_/users
- https://graph.microsoft.com/_/groups
The underscore “_” in each endpoint is a placeholder for the version of Microsoft Graph that should be used and will be replaced by WPO365 with beta.
To allow-list an endpoint, you must click the “+” at the end of each list entry. The entry should appear greyed-out.