To enable College Pipe for your organization, you must complete a two-part setup process, followed by a one-time action required from each of your users.
Part 1 & 2 (Admin): An administrator must authorize the College Pipe application in Microsoft Entra ID and then enable the SSO integration within the College Pipe admin panel.
Part 3 (User): Each staff member must then individually connect their email account from their personal College Pipe settings.
This complete process allows users to log in securely using their Microsoft credentials (SSO) and enables our platform to send emails on their behalf, directly from their own mailboxes using the Microsoft Graph API.
This guide requires a user with Global Administrator, Application Administrator, or Cloud Application Administrator privileges in your Microsoft Entra ID tenant.
This guide explains how to grant organization-wide permission (admin consent) for our application. This one-time approval by an administrator allows all users in your organization to sign in and use the integration without being asked for consent individually.
Prerequisites: You must have Global Administrator, Application Administrator, or Cloud Application Administrator permissions in your Microsoft Entra ID to perform these steps.
Your Tenant ID is a unique identifier for your organization's Microsoft Entra instance.
Sign in to the Microsoft Entra admin center with your administrator account.
On the main Overview page for your organization, you will find your Tenant ID.
Click the "copy" icon next to the ID to copy it to your clipboard.
Take the base URL provided below:
https://login.microsoftonline.com/{your-tenant-id}/adminconsent?client_id=ea2427a3-ac15-4865-89ca-800fa7af56df&scope=https://graph.microsoft.com/User.Read%20offline_access%20https://graph.microsoft.com/Mail.Send&redirect_uri=https://api.collegepipe.com/oauth2/tokens/microsoft
Replace the placeholder {your-tenant-id} with the Tenant ID you copied in Step 1.
Paste the complete, modified URL into your web browser and press Enter.
Sign in again with your Microsoft administrator account if prompted.
A "Permissions requested" window will appear. This window details the permissions our application needs to function correctly for your users. The requested permissions are:
Sign in and read user profile: To identify users and read basic profile information.
Send mail as the user: To enable specific features within our application.
Maintain access to data you have given it access to: To allow the application to work in the background without requiring the user to sign in every time.
Review the permissions and click Accept.
After you click "Accept," you will be redirected to a page that may show a simple error message, like the one below:
JSON
{"status":"ERROR","error":"Internal server error",...}
This is expected and normal behavior for this one-time setup process.
The consent has been successfully granted. This final page appears because the redirect link is designed for the regular user sign-in flow, not the admin consent flow. Microsoft server has already received the necessary confirmation in the background.
Thank you! Consent has now been granted for your entire organization. Your users can now sign in and begin using the application. If you have any questions, please contact our support team.
Now that Microsoft has authorized the connection, you must log into College Pipe to activate it for your users.
Log into your College Pipe administrator account.
Navigate to My Organisation > Recruiting Expert.
In the settings or authentication section, locate the sign-in options.
Select the option to "Sign in with Microsoft" and configure this setting for all user accounts.
Save your changes.
At this point, you have successfully enforced Microsoft SSO for all users at your organization.
Your setup is now live, but one final, individual step is required for the email sending feature to work. Each staff member must manually link their own account.
Please advise all your College Pipe users to follow these steps:
Log into College Pipe (using your newly configured Microsoft SSO).
Navigate to your personal Settings page (e.g., "My Profile," "Account Settings," etc.).
Find the Email Integration or "Connected Accounts" section.
Click the button to Connect Microsoft Account (or similar).
This will finalize the link between College Pipe and their individual mailbox, enabling the "send as" feature.
This is a required, one-time action for each user to activate the email integration. Here is a help article explaining this step in further detail: Guide to Integrate your Email
If you wish to restrict College Pipe access to only specific users (instead of everyone in your company), return to the Microsoft Entra admin center.
Navigate back to the College Pipe Enterprise Application (Identity > Applications > Enterprise applications > College Pipe).
Select Properties.
Set the "Assignment required?" toggle to Yes and click Save.
From the app menu, navigate to Users and groups and manually assign the specific users or security groups that should have access to College Pipe.
Q: Our users are seeing an "Admin approval needed" error when they try to log in.
A: This means Part 1 was skipped or not completed correctly. A Global Administrator must go to the Enterprise Application in Entra ID and click the "Grant admin consent" button on the "Permissions" page.
Q: A user says the "Connect Microsoft Account" button in their settings (Part 3) isn't working or gives an error.
A: This can have two common causes:
Conditional Access: Your organization's security policies in Entra ID might be blocking the connection. Your admin must check your Conditional Access policies to ensure they are not blocking the College Pipe application.
User Assignment: If you completed the "Optional Admin Step" above (requiring assignment), you must ensure that this specific user has been added to the "Users and groups" list for the College Pipe application in Entra ID.