Managing access to CafeX using Microsoft Office 365

TABLE OF CONTENTS

• Required Azure AD Enterprise Applications
• Controlling Access to CafeX
• Access Denied

As an administrator, you may want to control which members of your organization can sign in to CafeX. Microsoft Azure Active Directory (Azure AD) provides several options to manage application access, based on your organizational preferences or Microsoft licensing.

Required Azure AD Enterprise Applications

As an administrator, you have to configure two Azure AD Enterprise Applications for CafeX to operate correctly:

• CafeX—Used by members of your organization to sign into CafeX.
• CafeX—Used to access resources and content when using CafeX

To determine the most appropriate means of configuring the CafeX applications, see: Microsoft - Application Management.

Controlling Access to CafeX

If you use Microsoft Office 365 and want to restrict who can access CafeX, follow these steps:

1. In Microsoft Azure Portal, configure the CafeX application to require user assignment, as follows:
   
   
   1. Locate both enterprise applications.
   2. Set User assignment required? to Yes.
      
      See: Microsoft - Configure an application requires user assignment
2. Depending on your Microsoft licensing, assign users or groups:

• Option 1: Assign individual users to both CafeX enterprise applications.
  See: Microsoft - Assign groups to an application
   
• Option 2: Create a new Group for CafeX and assign it for both CafeX enterprise applications.
  Add and remove members as you require.
  See:
  1. Microsoft - Create a new Group
  2. Microsoft - Assign groups to an application
      
• Option 3: Create a new Group for CafeX and configure Self-Service for both CafeX enterprise applications.
  
  
  
  If you do not enable Require approval before granting access to this application, users are added to the CafeX group automatically when they first sign in. You may want to configure the Azure Access Panel to require administrator approval.
  See: 
  1. Microsoft—Enable self-service
  2. Microsoft—Create a new Group
  3. Microsoft—Planning for Azure AD Access Panel

Access Denied

If a user sees an Access has been denied message when signing into CafeX, it means they are not assigned to the application through Azure AD.

To resolve this, an administrator must assign the user to CafeX, so that they are able to sign in and use it. Users can still join meetings as guests without signing in, provided the meeting moderator allows it.