Outlook OAuth: self-service connect and multi-tenant Azure

Outlook integrations support self-service OAuth alongside the existing manual Azure App flow.

Self-service mode

Connect Outlook from the integrations catalog without configuring an Azure App first. The OAuth gateway handles consent through a managed multi-tenant Azure App by default.

Multi-tenant Azure

For organizations that require their own Azure App, the per-tenant toggle accepts a custom tenant ID and routes consent through that tenant. Azure App configuration is per-workspace, so tenants stay isolated.

Public OAuth popup routing

Public OAuth popups now route through the public API host instead of the production app domain, so the consent popup completes correctly when a user is connecting from a browser context that is not signed into the production app.