Use Claude for M365 with third-party platforms changedoffice-agents/third-party-platforms
Nearest release: v2.1.299, published 9 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 13 Oct 2026 14:49 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 22 Oct 2026 18:07 UTC.
Upstream edited
Recorded here
Lines+15added
Lines−7removed
From line
86
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits10to this page, all time
The whole hunk
from line 86, old and new numbered
/
from line 86
8686organization's Claude IP allowlist using the address they arrive from. If
8787your proxy sends traffic for that domain out through an address that is not
8888on that allowlist,
89[work across apps](/docs/office-agents/work-across-apps) stops while the rest of
89[work across apps](/docs/office-agents/work-across-apps.md) stops while the rest of
9090the add-in keeps working.
9191
9292### Third-party platforms (3P)
from line 198
198198| `/claude-for-msft-365-install:update-user-attrs` | Writes per-user configuration via Microsoft Graph extension attributes. |
199199| `/claude-for-msft-365-install:bootstrap` | Builds a bootstrap endpoint for per-user MCP servers, skills, and dynamic config. |
200200| `/claude-for-msft-365-install:debug` | Diagnoses deployment issues: stale config after a manifest update, connection failures, an add-in that does not appear, sign-in or admin-consent loops, and reading the add-in's error paste. |
201| `/claude-for-msft-365-install:export-data` | Makes a read-only copy of a user's chat history, skills, connector registrations, and settings before a device is rebuilt. See [Data storage and retention](/docs/office-agents/data-storage). |
201| `/claude-for-msft-365-install:export-data` | Makes a read-only copy of a user's chat history, skills, connector registrations, and settings before a device is rebuilt. See [Data storage and retention](/docs/office-agents/data-storage.md). |
202202
203203Run `/claude-for-msft-365-install:debug` whenever a connection or sign-in
204204does not behave as expected. It triages from the symptom, reads the "Copy
from line 233
233233
234234
235235
236Configuration resolution at add-in load: bootstrap, Entra ID attributes, then manifest parameters.
237
236238### Keep credentials out of the manifest URL query string
237239
238240Prefer a bootstrap endpoint (`bootstrap_url`) or Entra ID sign-in with
from line 302
300302Claude for Outlook reads mail and calendar data through Microsoft Graph,
301303which requires a one-time tenant-wide grant from a Global Administrator
302304regardless of which platform serves the model. Complete the
303[Microsoft Graph admin consent](/docs/office-agents/outlook#grant-microsoft-graph-consent)
305[Microsoft Graph admin consent](/docs/office-agents/outlook.md#grant-microsoft-graph-consent)
304306step before deployment so users are not prompted individually. The Graph
305307token stays in the user's Outlook client and is never sent to your
306308gateway or to Anthropic.
from line 311
309311multi-tenant application, register your own single-tenant Entra
310312application with the same delegated Graph permissions and provide its
311313client ID to the setup wizard as `graph_client_id`. See
312[Use your own Entra app instead](/docs/office-agents/outlook#use-your-own-entra-app-instead).
314[Use your own Entra app instead](/docs/office-agents/outlook.md#use-your-own-entra-app-instead).
313315
314316> [!NOTE]
315317>
from line 522
520522
521523
522524
525LLM gateway request flow: the add-in calls your gateway, which routes to your chosen provider.
526
523527### Bedrock, Vertex AI, or Foundry direct
524528
525529**1. Open the add-in**
from line 561
557561
558562
559563
564Bedrock direct flow: the add-in exchanges an Entra ID token for an AWS role, then calls Bedrock.
565
560566Vertex AI direct authenticates through Google OAuth, then calls Vertex
561567AI.
562568
563569
564570
571Vertex AI direct flow: the add-in authenticates with Google OAuth, then calls Vertex AI.
572
565573### Foundry direct without an API key
566574
567575Instead of a shared resource key, each user can authenticate to your
from line 587
5795871. In your Entra app registration, add the **Azure Cognitive Services**
580588 delegated permission `user_impersonation` and grant admin consent.
581589 Register the add-in's redirect URI as described in
582 [Use your own Entra app instead](/docs/office-agents/outlook#use-your-own-entra-app-instead).
590 [Use your own Entra app instead](/docs/office-agents/outlook.md#use-your-own-entra-app-instead).
5835912. Grant the users or groups who will sign in the **Cognitive Services
584592 User** role on the Foundry resource.
5855933. Put these parameters in the manifest URL (no `azure_api_key`):
from line 903
895903
896904To route a full audit trail, including prompts, tool inputs, tool
897905outputs, and document references, to your own infrastructure, see
898[Configure a custom OpenTelemetry collector](/docs/office-agents/opentelemetry).
906[Configure a custom OpenTelemetry collector](/docs/office-agents/opentelemetry.md).
899907That page covers the `otlp_endpoint`, `otlp_headers`, and
900908`otlp_attr_max_chars` configuration keys, the CORS requirements for the
901909collector endpoint, and the full span reference.
from line 974
966974### Microsoft admin-consent redirects
967975
968976The Microsoft Graph consent link in
969[Grant Microsoft Graph consent](/docs/office-agents/outlook#grant-microsoft-graph-consent)
977[Grant Microsoft Graph consent](/docs/office-agents/outlook.md#grant-microsoft-graph-consent)
970978uses Microsoft's
971979[admin-consent endpoint](https://learn.microsoft.com/en-us/entra/identity-platform/v2-admin-consent).
972980By Microsoft's specification, the redirect back to
No line in this hunk matches that.