Merge branch 'main' into dle-working-m365-july25

Author: davidedwards365

copilot/employee-self-service/servicenow-hrsd-itsm.md

@@ -73,7 +73,7 @@ Refer to the ESS Agent deployment guide for installation of the agent and subscr
 | **Application Developer** (*minimum privileged role*)  | User who can register an application | Create an App registration - *if using Microsoft Entra OAuth for ServiceNow connector* | Microsoft 365 Admin Center |
 | **Environment Maker** | User who can customize ESS Agent | Configure & Customize ESS Agent | Microsoft Copilot Studio |
 
-### ServiceNow configuration
+## ServiceNow configuration
 
 This section outlines the tasks required to be configured in ServiceNow by an administrator.  ServiceNow integration supports three types of authentications as follows:
 
@@ -88,7 +88,86 @@ This section outlines the tasks required to be configured in ServiceNow by an ad
 > [!TIP]
 > Without elevating access, the new security objects can't be created. If **New** button in the top right of configuration pane is missing, then the role isn't elevated to "`security_admin`”.
 
-#### Option 1: Using OAuth2 authentication - Create an OAuth Application Registry
+### Basic authentication
+
+This method of authentication involves a ServiceNow username and password to authenticate API requests.  This method is simple to use and is primarily suggested for testing purposes, as it offers lower security compared to other authentication methods.
+
+### Microsoft EntraID OAuth using Certificate
+
+This authentication uses app tokens, allowing a registered Entra ID application to access ServiceNow with a token specifying the ServiceNow Entra ID app as the resource.
+
+#### Task 1: Register an application in Microsoft Entra ID for OIDC integration with ServiceNow
+
+[Learn how to register an app in Microsoft Entra ID.](/entra/identity-platform/quickstart-register-app)
+
+1. Sign into the Microsoft Entra admin portal as a global administrator or cloud app administrator.
+1. Go to **Applications** then **App registrations**.
+1. Select **New registration.**
+1. In the new registration form, fill in the following fields:
+    1. **Name:** Any name that represents the purpose of app registratio
+    1. **Redirect URL:** Not needed
+1. Choose **Register** to complete the creation of the new app registration.
+1. Select **Token configuration** then **Add optional claim** for adding claims setting.
+1. Select **Token type** as **Access** and choose the following claims:
+    1. *aud* - for audience validation
+    1. *email* - addressable email for user
+    1. *upn* - an identifier for the user
+1. Select **Add** to complete adding the claims.
+1. If this is the first time OpenId Connect being setup using claims like email, upn, there’ll be a confirmation to turn on the Microsoft Graph permissions, please check the box and select **Add**.
+1. This flow completes the Microsoft Entra piece of configuration.
+
+#### Task 2: Register OIDC provider in ServiceNow
+
+1. Login to the ServiceNow instance that needs to be integrated with ESS Agent.
+1. Elevate access permissions using **Elevate role**. Refer to the section **Error! Reference source not found.** – only the first part and not the tasks.
+1. Click **All** in the top navigation bar.
+1. Search for “OAuth” in the search box within dropdown navigation menu.
+1. Select **System OAuth à Application Registry** from the search results (if you don’t see this option, then you don’t have sufficient privileges).
+1. Select **New** in the configuration section pane.
+1. Select **Configure an OIDC provider to verify ID tokens**.
+1. Fill in the following information for the new application registry:
+
+|Configuration |Description |
+|--------------|------------|
+|Name |a meaningful name to identify that this OIDC provider was created for ESS Agent |
+|Client ID |The client ID of Entra Application created in Task 1 above |
+|Client secret |This value will not be used; can be any value |
+|OAuth OIDC provider configuration |Add a new OIDC provider configuration by selecting the search icon and choosing **New** in the search popup. Fill in the fields as follows:</br> **OIDC Provider:** A name that represents the Microsoft Entra tenant from task 1 above.</br> **OIDC Metadata URL:** `login.microsoftonline.com/<tenant ID>/.well-known/openid-configuration`</br> Replace < tenant ID > with the Entra tenant ID from task 1 above.</br> **OIDC Configuration Cache Life Span:** 120</br> **Application:** Global</br> **User Claim:** oid</br> **User Field:** User ID</br> **Enable JTI claim verification:** disabled</br> Select **Submit** and update the OIDC Entity form. |
+
+#### Task 3: Register an Application in Microsoft Entra ID for connector usage
+
+This is the application which plays the role of a user with elevated permissions in the ServiceNow instance.
+
+1. Login to Entra administration portal as global administrator (or) cloud app administrator.
+1. Go to **Applications** > **App registrations**.
+1. Select **New registration**.
+1. In the new registration form, fill in the following fields:.
+    1. **Name:** any name that represents the purpose of app registration.
+    2. **Redirect URI:** Not needed.
+1. Click **Register** to complete the creation of new app registration.
+1. Select **Certificates & secrets** then upload the .cer file of the certificate. In case of SNI certificate, just add trustedCertificateSubjects in the manifest of the application with the relevant authorityId and subjectName.
+
+#### Task 4: Create a System User in ServiceNow
+
+This is the Application created in the above task 3 which is a user in ServiceNow instance.
+
+Go to **User Administration** > **Users** to create a new user.
+
+**User ID:** The object ID of the service principal of Application created in Task 3 above.
+
+Check **Web service access only**.
+
+### Microsoft Entra ID OAuth User Login
+
+This is user-token based authentication where the end user can sign into Entra ID 1st party application i.e. ServiceNow connector 1st party app and get an access token with scope for the ServiceNow representative Entra ID app.
+
+Perform Task 1 & Task 2 from the previous section Microsoft Entra ID OAuth using Certificate.
+
+In the Task 1 – add the 1st party application i.e., ServiceNow connector to the permission scope – Client ID = c26b24aa-7874-4e06-ad55-7d06b1f79b63.
+
+In the Task 2 – update the user claim to upn or any other custom claim property from the token in ServiceNow.  The user field should match the ServiceNow system user table field containing the upn or user ID.
+
+### Using OAuth2 authentication - Create an OAuth Application Registry
 
 1. Log in to the ServiceNow instance that needs to be integrated with ESS Agent.
 2. Elevate access permissions using **Elevate role**.
@@ -104,7 +183,7 @@ This section outlines the tasks required to be configured in ServiceNow by an ad
     | **Name** | a meaningful name to identify that this application registry is created for ESS Agent |
     | **Client ID** | autogenerated code <br><div class="alert">**Note**</br>This value is used in Microsoft 365 Copilot Connector configuration, if no Advanced Scripting is used. |
     | **Client Secret** | leave it blank to automatically generate a string <br><div class="alert">**Note**</br>This value is used in Microsoft 365 Copilot Connector configuration, if no Advanced Scripting is used. |
-    | **Redirect URL** | a required callback URL that the authorization server redirects to </br>For Microsoft 365 Enterprise:</br>`https://gcs.office.com/v1.0/admin/oauth/callback`</br>For Microsoft 365 Government:</br>`https://gcsgcc.office.com/v1.0/admin/oauth/callback`|
+    | **Redirect URL** | a required callback URL that the authorization server redirects to </br>For Microsoft 365 Enterprise:</br>`https://gcs.office.com/v1.0/admin/oauth/callback`</br>For Microsoft 365 Government:</br>`https://gcsgcc.office.com/v1.0/admin/oauth/callback` Refer to the note after the table for more information.|
     | **Logo URL** | A URL that contains the image for the application logo |
     | **Active** | Set to active |
     | **Refresh token lifespan** | The number of seconds that a refresh token is valid. </br>By default, refresh tokens expire in 100 days (8,640,000 seconds). Recommended value is 31,536,000 (one year) |
@@ -113,6 +192,9 @@ This section outlines the tasks required to be configured in ServiceNow by an ad
     | **Accessible from** | All application scopes |
     | **Client Type** | Integration as a Service |
 
+>[!NOTE]
+>[Please use the actual callback URL from the sign-in popup window during connection configuration by following the steps below, when the URL redirection fails with the error **Invalid redirect_uri**:</br> Copy/paste the complete URL from the authorization popup window</br> Extract redirect_uri parameter.</br> Example: `redirect_uri=https%3a%2f%2ftip1-shared.consent.azure-apim.net%2fredirect`</br> After decoding the URL – replacing %3a with : and %2f with /</br> Update the Redirect URL field.]
+
 9. Select **Submit** or **Update** button to save the changes.
 
 ### Install ServiceNow HRSD extension pack

microsoft-365/lti/TOC.yml

@@ -7,14 +7,14 @@ items:
       href: browser-cookies.md
     - name: Canvas integrations
       items:
+      - name: Deploy Microsoft 365 LTI in Canvas
+        href: microsoft-365-lti-canvas.md
       - name: Use Microsoft OneDrive LTI with Canvas 
         href: onedrive-lti.md
       - name: Use Microsoft Teams Assignments with Canvas
         href: teams-assignments-with-canvas.md
-      - name: Use Microsoft Teams classes with Canvas 
+      - name: Use Microsoft Teams with Canvas 
         href: teams-classes-with-canvas.md
-      - name: Use Microsoft Teams meetings with Canvas 
-        href: teams-meetings-with-canvas.md
       - name: Use Microsoft Reflect LTI with Canvas
         href: reflect-lti-canvas.md
     - name: Blackboard integrations
@@ -23,9 +23,7 @@ items:
         href: onedrive-lti-blackboard.md
       - name: Use Microsoft Teams Assignments with Blackboard  
         href: teams-assignments-with-blackboard.md
-      - name: Use Microsoft Teams meetings with Blackboard Learn
-        href: teams-meetings-with-blackboard-learn.md
-      - name: Use Microsoft Teams classes with Blackboard Learn Ultra 
+      - name: Use Microsoft Teams with Blackboard Learn Ultra 
         href: teams-classes-with-blackboard.md
       - name: Use Microsoft Reflect LTI with Blackboard Learn
         href: reflect-lti-blackboard.md        
@@ -35,24 +33,18 @@ items:
         href: moodle-plugin-configuration.md
       - name: Use Microsoft Teams Assignments with Moodle  
         href: teams-assignments-with-moodle.md        
-      - name: Use Microsoft Teams classes and meetings with Moodle
-        href: teams-classes-meetings-with-moodle.md
       - name: Use Microsoft Reflect LTI with Moodle
         href: reflect-lti-moodle.md        
     - name: Open LMS integrations
       items:
       - name: Set up and configure the Moodle plugin for Open LMS
         href: open-lms-plugin-configuration.md
-      - name: Use Microsoft Teams classes and meetings with Open LMS
-        href: open-lms-teams-classes-and-meetings.md
     - name: D2L Brightspace integrations
       items:
       - name: Use Microsoft OneDrive LTI with Brightspace
         href: onedrive-lti-brightspace.md
       - name: Use Microsoft Teams Assignments with Brightspace  
         href: teams-assignments-with-brightspace.md
-      - name: Use Microsoft Teams classes and meetings with Brightspace
-        href: teams-classes-meetings-with-brightspace.md
       - name: Use Microsoft Reflect LTI with D2L Brightspace
         href: reflect-lti-brightspace.md        
     - name: Schoology Learning integrations
@@ -61,14 +53,10 @@ items:
         href: onedrive-lti-schoology.md
       - name: Use Microsoft Teams Assignments with Schoology Learning
         href: teams-assignments-with-schoology.md 
-      - name: Use Microsoft Teams meetings with Schoology Learning
-        href: teams-classes-and-meetings-with-schoology.md
       - name: Use Microsoft Reflect LTI with Schoology Learning
         href: reflect-lti-schoology.md
     - name: Other LMS integrations
       items:
-      - name: Use Microsoft Teams Meetings LTI with any LTI 1.3 compliant LMS
-        href: integrate-with-other-lms.md
       - name: Use Microsoft Teams Assignments LTI with any LTI 1.3 compliant LMS
         href: teams-assignments-with-other-lms.md
 

microsoft-365/lti/index.md

@@ -1,10 +1,12 @@
 ---
 title: An overview of Microsoft LTI apps
-author: DaniEASmith
-ms.author: danismith
-manager: jacktremper
+author: jennplatt
+ms.author: avering
+manager: michal.gideoni
 ms.reviewer: amitman, sovaish
-ms.date: 06/15/2021
+last.review.by: 
+last.review.date: 06/15/2021
+ms.date: 07/10/2025
 audience: admin
 ms.topic: concept-article
 ms.service: msteams
@@ -14,7 +16,7 @@ ms.collection:
 - M365-modern-desktop
 - tier2
 ms.localizationpriority: medium
-description: Learn about Learning Tools Interoperability (LTI) Microsoft apps, and how they will help educators when integrating Microsoft apps into their Learning Management System (LMS).
+description: Learn about Learning Tools Interoperability (LTI) Microsoft apps, and how they help educators when integrating Microsoft apps into their Learning Management System (LMS).
 ---
 
 # Integrating Microsoft products with your Learning Management System (LMS)
@@ -27,36 +29,29 @@ These tools include:
 
 - [OneDrive LTI](#onedrive-lti-apps)
 - [Teams Assignments LTI](#teams-assignments-lti)
-- [Teams Meetings LTI](#teams-meetings-lti)
-- [Teams Classes LTI](#teams-classes-lti)
 - [Microsoft Reflect LTI](#microsoft-reflect-lti)
 
+You can also [sync teams with your LMS](#sync-teams-with-your-lms).
+
 For general information on managing Microsoft LTI apps, see [Manage Microsoft LTI apps for any LMS](manage-microsoft-one-lti.md).
 
 > [!IMPORTANT]
 > We're streamlining the LTI® (Learning Tools Interoperability) experiences for education customers who may be using different LMS systems. We're simplifying onboarding and usage by consolidating the capabilities of multiple LTI tools available today into fewer and more functional tools.
 >
-> The capabilities of the Teams Classes LTI and Meetings LTI tools are among the first tools updated in this consolidation. Microsoft is announcing the end of support for the Teams Classes LTI and Meetings LTI tools on September 15, 2025, as their capabilities will be superseded by a new, unified experience. Release details for the unified experience are forthcoming.
+> The capabilities of the Teams LTI and Meetings LTI tools are among the first tools updated in this consolidation. Microsoft is announcing the end of support for the Teams Classes LTI and Meetings LTI tools on September 15, 2025, as their capabilities will be superseded by a new, unified experience. Release details for the unified experience are forthcoming.
 
 ## OneDrive LTI apps
 
 Learn more about using Microsoft OneDrive with your Learning Management System (LMS).
 
-- **Brings Microsoft 365 directly into your workflows**
-
-The Microsoft OneDrive LTI app integrates with your LMS to bring Microsoft OneDrive and Microsoft 365 directly into your most important workflows that include:
-
-- Attaching resources and organizing content.
-- Starting collaborative documents.
-- Creating and grading assignments.
+- **Brings Microsoft 365 directly into your workflows** - The Microsoft OneDrive LTI app integrates with your LMS to bring Microsoft OneDrive and Microsoft 365 directly into your most important workflows that include:
+  - Attaching resources and organizing content.
+  - Starting collaborative documents.
+  - Creating and grading assignments.
 
-- **Secure and fully compliant with latest LTI standards**
+- **Secure and fully compliant with latest LTI standards** - The Microsoft OneDrive LTI App is compatible with LTI 1.3 and LTI Advantage, allowing for a secure and integrated user experience.
 
-The Microsoft OneDrive LTI App is compatible with LTI 1.3 and LTI Advantage, allowing for a secure and integrated user experience.
-
-- **Modern and rich user experience**
-
-We're improving upon the existing Microsoft 365 integration in your LMS by delivering a modern user experience, complete with an expanded Microsoft OneDrive file picker and rich editing experiences for Office files.
+- **Modern and rich user experience** - We're improving upon the existing Microsoft 365 integration in your LMS by delivering a modern user experience, complete with an expanded Microsoft OneDrive file picker and rich editing experiences for Office files.
 
 Microsoft owns the OneDrive LTI app, which means you’ll always get the latest updates from Microsoft automatically.
 
@@ -78,6 +73,7 @@ For configuration steps, see:
 - [Microsoft OneDrive LTI with D2L Brightspace](onedrive-lti-brightspace.md)
 
 ## Teams Assignments LTI
+
 The Microsoft Teams Assignments LTI brings the Learning Accelerators: Reading Progress, Math Progress. Search Progress and Speaker Progress along with Microsoft Forms, Whiteboard, OneNote Pages, and all of the new generative AI features of Teams Assignments to your LTI v1.3 Advantage compliant LMS.
 The integration allows you to Connect Class Teams and add Teams Assignments right into your LMS assignments list where students can launch and complete them and sync grades and feedback automatically back to the LMS.
 
@@ -88,32 +84,7 @@ The integration allows you to Connect Class Teams and add Teams Assignments righ
 - [Microsoft Assignments integration with Desire2Learn Brightspace](teams-assignments-with-brightspace.md).
 - [Microsoft Assignments integration with any LTI 1.3 compliant LMS](teams-assignments-with-other-lms.md).
 
-More LMS support coming soon! Please sign up for more information on current and future LMS integration previews at https://aka.ms/LMSPreview
-
-## Teams Meetings LTI
-
-Microsoft Teams Meetings LTI app incorporates Teams meetings into LMS courses. Educators and students can view past and upcoming meetings, schedule individual or recurring meetings, and join team meetings related to the course, all from within their LMS.
-
-For configuration steps, see:
-
-- [Microsoft Teams Meetings with Canvas](teams-meetings-with-canvas.md).
-- [Microsoft Teams Meetings with Moodle](teams-classes-meetings-with-moodle.md).
-- [Microsoft Teams Meetings with Open LMS](open-lms-teams-classes-and-meetings.md).
-- [Microsoft Teams Meetings with Desire2Learn Brightspace](teams-classes-meetings-with-brightspace.md).
-- [Microsoft Teams Meetings with Schoology Learning](teams-classes-and-meetings-with-schoology.md).
-- [Microsoft Teams Meetings LTI with any LTI 1.3 compliant LMS](integrate-with-other-lms.md).
-
-## Teams Classes LTI
-
-The Microsoft Teams Classes LTI app helps educators and students navigate between their LMS and Teams. Users can access their class teams associated with their course within their LMS.
-
-For configuration steps, see:
-
-- [Microsoft Teams Classes with Canvas](teams-classes-with-canvas.md).
-- [Microsoft Teams Classes with Blackboard](teams-classes-with-blackboard.md).
-- [Microsoft Teams Classes with Moodle](teams-classes-meetings-with-moodle.md).
-- [Microsoft Teams Classes with Open LMS](open-lms-teams-classes-and-meetings.md).
-- [Microsoft Teams Classes with Desire2Learn Brightspace](teams-classes-meetings-with-brightspace.md).
+More LMS support coming soon! Sign up for more information on current and future LMS integration previews at https://aka.ms/LMSPreview
 
 ## Microsoft Reflect LTI
 
@@ -128,3 +99,15 @@ For configuration steps, see:
 - [Microsoft Reflect with Moodle](reflect-lti-moodle.md).
 - [Microsoft Reflect with D2L Brightspace](reflect-lti-brightspace.md).
 - [Microsoft Reflect with Blackboard Learn](reflect-lti-blackboard.md).
+
+## Sync Teams with your LMS
+
+Syncing Microsoft Teams with your LMS helps educators and students navigate between their LMS and Teams. Users can access their teams associated with their course within their LMS.
+
+For configuration steps, see:
+
+- [Microsoft Teams with Canvas](teams-classes-with-canvas.md).
+- [Microsoft Teams with Blackboard](teams-classes-with-blackboard.md).
+- [Microsoft Teams with Moodle](teams-classes-meetings-with-moodle.md).
+- [Microsoft Teams with Open LMS](open-lms-teams-classes-and-meetings.md).
+- [Microsoft Teams with Desire2Learn Brightspace](teams-classes-meetings-with-brightspace.md).