# Microsoft Exchange

<!-- BEGIN GENERATED:intro -->

The Microsoft Exchange connector is a [Palantir-provided driver](../../data-integration/foundry-provided-drivers/index.md) for Microsoft Exchange.

To create a new Microsoft Exchange source, follow the [standard setup flow for Palantir-provided drivers](../../data-integration/foundry-provided-drivers/index.md#setup), then use the sections below for Microsoft Exchange-specific configuration and networking. For the complete property reference, see the [official Microsoft Exchange driver documentation ↗](https://cdn.cdata.com/help/CEM/jdbc/pg_connectionj.htm).

<!-- END GENERATED:intro -->

<!-- BEGIN GENERATED:capabilities -->

## Supported capabilities

| Capability | Status |
|---|---|
| Exploration | 🟢 Generally available |
| Batch syncs | 🟢 Generally available |
| Incremental | 🟢 Generally available |
| [OAuth 2.0 authentication](#oauth-20-authentication) | 🟢 Generally available |
| [Table exports](#table-exports) | 🟢 Generally available |

<!-- END GENERATED:capabilities -->

<!-- BEGIN GENERATED:configuration -->

## Configuration

The properties below are mandatory or recommended.

| Property | Required? | Description | Default |
|---|---|---|---|
| [`DefaultGroups` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_DefaultGroups.htm) | Mandatory | Determines the default group context when accessing group-scoped resources in Microsoft Exchange. | `AllGroups` |
| [`DefaultUser` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_DefaultUser.htm) | Mandatory | Determines the default user context when accessing user-scoped resources in Microsoft Exchange. | `CurrentUser` |
| [`Server` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_Server.htm) | Mandatory | Specifies the URL of the Microsoft Exchange server to connect to. | `https://outlook.office365.com/EWS/Exchange.asmx` |
| [`AuthScheme` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_AuthScheme.htm) | Recommended | Specifies the authentication scheme used to connect to the Microsoft Exchange server. | `AzureServicePrincipal` |
| [`AzureTenant` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_AzureTenant.htm) | Recommended | Identifies the Microsoft Exchange tenant being used to access data. Accepts either the tenant's domain name (for example, contoso.onmicrosoft.com ) or its directory (tenant) ID. | — |
| [`GroupId` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_GroupId.htm) | Recommended | Specifies the Id of a Microsoft Exchange group whose data you want to access. | — |
| [`InitiateOAuth` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_InitiateOAuth.htm) | Recommended | Specifies the process for obtaining or refreshing the OAuth access token, which maintains user access while an authenticated, authorized user is working. | `GETANDREFRESH` |
| [`OAuthClientId` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_OAuthClientId.htm) | Recommended | Specifies the client ID (also known as the consumer key) assigned to your custom OAuth application. This ID is required to identify the application to the OAuth authorization server during authentication. | — |
| [`OAuthClientSecret` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_OAuthClientSecret.htm) | Recommended | Specifies the client secret assigned to your custom OAuth application. This confidential value is used to authenticate the application to the OAuth authorization server. (Custom OAuth applications only.) | — |
| [`Office365Environment` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_Office365Environment.htm) | Recommended | Specifies the Office 365 environment to use for Graph API requests when using the MSGraph schema. | `NONE` |
| [`Platform` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_Platform.htm) | Recommended | Specifies the Microsoft Exchange platform to target when establishing a connection. | `Exchange_Online` |
| [`Schema` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_Schema.htm) | Recommended | Specifies the schema to use when connecting to the Microsoft Exchange platform. | `EWS` |
| [`UserId` ↗](https://cdn.cdata.com/help/CEM/jdbc/RSBExchange_p_UserId.htm) | Recommended | Specifies the Id of a Microsoft Exchange user whose data you want to access. | — |

<!-- END GENERATED:configuration -->

<!-- BEGIN GENERATED:networking -->

## Networking

The table below lists the domains that the source must be able to access to run.

For each domain, add a corresponding [egress policy](../../administration/configure-egress/index.md). If the source is hosted on-premises and not directly reachable from Foundry, use an [agent proxy egress policy](../../administration/configure-egress/index.md#agent-proxy-egress-policies) instead. The agent host itself must also be able to reach the listed domains. See [using an agent as a proxy](../../data-connection/agent-proxy/index.md) for details.

| Domain  | Required |
|--- |--- |
| \<Server> | Always. For Exchange Online, use `Server=' https://outlook.office365.com/EWS/Exchange.asmx'` |
| outlook.office365.com | If `Platform=Exchange_Online` AND `Schema=EWS` |
| graph.microsoft.com | If `Platform=Exchange_Online` AND `Schema=MSGraph` |
| login.microsoftonline.com | If `Platform=Exchange_Online` (default) AND `AuthScheme=AzureAD,` AzureServicePrincipal, or AzureServicePrincipalCert |
| \<KerberosKDC>:88 | If `AuthScheme=Negotiate` |
| \<KerberosServiceKDC>:88 | If `AuthScheme=Negotiate` AND Kerberos topology uses multiple realms |

<!-- END GENERATED:networking -->

<!-- BEGIN GENERATED:oauth -->

## OAuth 2.0 authentication

This connector supports OAuth 2.0 authentication. Follow the [OAuth 2.0 guidance for Palantir-provided drivers](../../data-integration/foundry-provided-drivers/index.md#oauth-20-authentication) to configure and authorize the connection.

<!-- END GENERATED:oauth -->

<!-- BEGIN GENERATED:table-exports -->

## Table exports

This connector supports table exports. Learn how to [set up a table export](../../data-connection/export-overview/index.md#table-exports).

<!-- END GENERATED:table-exports -->