When a Drift User attempts to connect their O365 calendar for the first time, the consent request is seen in Entra as a new request for a Drift Enterprise App to be connected.
Note: This connection request is specific to calendaring; the Enterprise App for SSO is also available within Entra and is named Drift as well, these two perform unique functions for user-access and facilitating booking meetings in live chat. The SSO application can be pre-installed, the calendaring app for O365 is shown upon user-request.

Some orgs will have a Microsoft setup that requires an admin to directly give this Drift calendaring app permissions to access a user's account, adding a step of Global Admin consent approval.

The Drift App uses only Microsoft Graph, which we’ll give more details on below.  The app requires these permissions from Microsoft Graph:

• Calendars.Read
• Calendars.Read.Shared
• Calendars.ReadWrite
• Calendars.ReadWrite.Shared
• User.Read

Each graph app also by default gets access to these permissions:

• email
• offline_access
• openid
• profile

None of these permissions require Admin consent unless the org requires any Microsoft app to require admin consent.

Finding and Using the App

Once a user has logged in to Drift and gone through the steps to connect their O365 calendar from within the platform, the Microsoft Admin will see a new request within Entra to install an Enterprise App for Drift. Drift uses the common OAuth 2.0 to authenticate from Microsoft, starting with a link like this.

The Drift App uses Microsoft’s Graph API to interact with a user's calendar.

• Microsoft Graph is the recommended api from Microsoft to use for things like a calendar integration
• Here’s an overview document of how it works.

Microsoft Global Admins need to either individually assign users to this calendaring app, and ensure they all have delegated permissions to connect their calendars as described in the list at the beginning of this document. Once the appropriate users have been assigned and given permission, they can follow individual steps to authorize the calendar connection without subsequent Microsoft Admin involvement.

Alternatively, Microsoft Admins may elect to setup an Active Directory Group and assign Drift Users as members of this Group for enhanced enterprise-wide control of access to Drift. This means that when new users are provisioned, or old users no longer need access to Drift calendar connections, they can have those permissions managed directly within Entra.

Microsoft Graph doesn’t work with most exchange or on premise setups

• This doc runs down the requirements for an exchange setup for graph to work.
• There’s currently no plans to build an exchange integration. Some variety of a cloud calendar will always be required to use Drift <> O365 Calendars.