Use Claude for M365 with third-party platforms changedoffice-agents/third-party-platforms
Nearest release: v2.1.299, published 9 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 13 Oct 2026 14:49 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 23 Oct 2026 18:07 UTC.
Upstream edited
Recorded here
Lines+7added
Lines−7removed
From line
86
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits10to this page, all time
The whole hunk
from line 86, old and new numbered
/
from line 86
8686organization's Claude IP allowlist using the address they arrive from. If
8787your proxy sends traffic for that domain out through an address that is not
8888on that allowlist,
89[work across apps](/docs/office-agents/work-across-apps.md) stops while the rest of
89[work across apps](https://claude.com/docs/office-agents/work-across-apps.md) stops while the rest of
9090the add-in keeps working.
9191
9292### Third-party platforms (3P)
from line 198
198198| `/claude-for-msft-365-install:update-user-attrs` | Writes per-user configuration via Microsoft Graph extension attributes. |
199199| `/claude-for-msft-365-install:bootstrap` | Builds a bootstrap endpoint for per-user MCP servers, skills, and dynamic config. |
200200| `/claude-for-msft-365-install:debug` | Diagnoses deployment issues: stale config after a manifest update, connection failures, an add-in that does not appear, sign-in or admin-consent loops, and reading the add-in's error paste. |
201| `/claude-for-msft-365-install:export-data` | Makes a read-only copy of a user's chat history, skills, connector registrations, and settings before a device is rebuilt. See [Data storage and retention](/docs/office-agents/data-storage.md). |
201| `/claude-for-msft-365-install:export-data` | Makes a read-only copy of a user's chat history, skills, connector registrations, and settings before a device is rebuilt. See [Data storage and retention](https://claude.com/docs/office-agents/data-storage.md). |
202202
203203Run `/claude-for-msft-365-install:debug` whenever a connection or sign-in
204204does not behave as expected. It triages from the symptom, reads the "Copy
from line 302
302302Claude for Outlook reads mail and calendar data through Microsoft Graph,
303303which requires a one-time tenant-wide grant from a Global Administrator
304304regardless of which platform serves the model. Complete the
305[Microsoft Graph admin consent](/docs/office-agents/outlook.md#grant-microsoft-graph-consent)
305[Microsoft Graph admin consent](https://claude.com/docs/office-agents/outlook.md#grant-microsoft-graph-consent)
306306step before deployment so users are not prompted individually. The Graph
307307token stays in the user's Outlook client and is never sent to your
308308gateway or to Anthropic.
from line 311
311311multi-tenant application, register your own single-tenant Entra
312312application with the same delegated Graph permissions and provide its
313313client ID to the setup wizard as `graph_client_id`. See
314[Use your own Entra app instead](/docs/office-agents/outlook.md#use-your-own-entra-app-instead).
314[Use your own Entra app instead](https://claude.com/docs/office-agents/outlook.md#use-your-own-entra-app-instead).
315315
316316> [!NOTE]
317317>
from line 587
5875871. In your Entra app registration, add the **Azure Cognitive Services**
588588 delegated permission `user_impersonation` and grant admin consent.
589589 Register the add-in's redirect URI as described in
590 [Use your own Entra app instead](/docs/office-agents/outlook.md#use-your-own-entra-app-instead).
590 [Use your own Entra app instead](https://claude.com/docs/office-agents/outlook.md#use-your-own-entra-app-instead).
5915912. Grant the users or groups who will sign in the **Cognitive Services
592592 User** role on the Foundry resource.
5935933. Put these parameters in the manifest URL (no `azure_api_key`):
from line 903
903903
904904To route a full audit trail, including prompts, tool inputs, tool
905905outputs, and document references, to your own infrastructure, see
906[Configure a custom OpenTelemetry collector](/docs/office-agents/opentelemetry.md).
906[Configure a custom OpenTelemetry collector](https://claude.com/docs/office-agents/opentelemetry.md).
907907That page covers the `otlp_endpoint`, `otlp_headers`, and
908908`otlp_attr_max_chars` configuration keys, the CORS requirements for the
909909collector endpoint, and the full span reference.
from line 974
974974### Microsoft admin-consent redirects
975975
976976The Microsoft Graph consent link in
977[Grant Microsoft Graph consent](/docs/office-agents/outlook.md#grant-microsoft-graph-consent)
977[Grant Microsoft Graph consent](https://claude.com/docs/office-agents/outlook.md#grant-microsoft-graph-consent)
978978uses Microsoft's
979979[admin-consent endpoint](https://learn.microsoft.com/en-us/entra/identity-platform/v2-admin-consent).
980980By Microsoft's specification, the redirect back to
No line in this hunk matches that.