Skip to main content
Microsoft Outlook Logo
Outlook Personal

Your own mailbox, with your own Microsoft sign-in

✅ Ready📖 Documentation Available

​
Overview

Outlook Personal syncs one mailbox: the one you sign in with. It uses delegated Microsoft Graph permissions, so it needs no admin-consented application permissions and reads nothing beyond your own mail. Only you can search what it syncs. To sync every mailbox in your organization, an administrator sets up the Outlook connector instead.

​
What gets synced

​
Authentication

An administrator registers an app in Microsoft Entra and saves it in PipesHub as an OAuth app (steps 1–4). Each user then adds the connector with that app and signs in with their Microsoft work or school account. PipesHub asks for these delegated permissions:

​
Configuration Guide

​
Step 1: Register an application

  1. Go to the Azure Portal → Microsoft Entra ID → App registrations → New registration.
  2. Give it a name (for example, PipesHub Outlook Personal).
  3. Under Supported account types, choose Accounts in this organizational directory only.
  4. Under Redirect URI, choose Web and enter:
  1. Click Register.
The redirect URI must match your PipesHub address exactly, including the port if you use one. Microsoft accepts https addresses, and http only for localhost (local development).

​
Step 2: Copy the IDs and create a client secret

  1. On the app’s Overview page, copy the Application (client) ID and the Directory (tenant) ID.
  2. Go to Certificates & secrets → New client secret, add it, and copy its Value right away (it is shown only once).

​
Step 3: Add the delegated permissions

  1. Go to API permissions → Add a permission → Microsoft Graph → Delegated permissions.
  2. Add Mail.Read, User.Read and offline_access.
These are delegated permissions: each user consents for their own mailbox when they sign in. If your organization blocks user consent, an administrator can grant consent for these three permissions once.

​
Step 4: Add the connector in PipesHub

The app registration from steps 1–3 is saved in PipesHub as an OAuth app, which an administrator sets up once for everyone:
  • Administrator: open Connectors, choose Outlook Personal, click Add, and enter the Client ID, Client Secret and Tenant ID from step 2. PipesHub saves them as an OAuth app and links it to the connector.
  • Member: open Connectors, choose Outlook Personal, click Add, and select the OAuth app your administrator set up. Members cannot enter app credentials.
Then save the connector and click Authorize. Microsoft opens its sign-in page: sign in with the mailbox you want to sync and accept the permissions.
Sign in with the same email address as your PipesHub account.

​
Step 5: Choose what to sync and enable

Enable sync. The first sync reads every selected folder; later syncs read only the changes (every 60 minutes by default, or when you start one).

​
Data sync behavior

  • New, changed and moved mail is picked up on the next sync. A moved message keeps its place in search; reading or flagging mail does not re-index it.
  • Deleted mail and folders are removed from search on the next sync. Moving mail to Deleted Items counts as deleting it, unless you sync Deleted Items.
  • Large attachments: attachments over 25 MB are listed but not indexed.
  • Changing a filter starts a full sync, which removes what is no longer in scope.

​
Troubleshooting

“Sign in again” or the connector stops syncing. Your refresh token was revoked or expired (for example after a password change). Open the connector and click Authorize again.Redirect URI mismatch during sign-in (AADSTS50011). The redirect URI in the app registration must match the one in step 1 exactly.Need admin approval. Your organization requires an administrator to consent. Ask them to grant consent for Mail.Read, User.Read and offline_access on the app.A personal outlook.com account does not work. The app registration in step 1 accepts accounts of your organization only.