Immersive Reader

If you have not yet registered for an application in Azure AD, please review the text box below: 'Register for Azure AD'.

Once an Application (Schoolbox) has been registered in Azure, and you have configured the appropriate secrets into Schoolbox you may now begin the setup of Immersive Reader.

1. Under Marketplace. click on  'Immersive Reader'.

2. Then, on the 'Create Immersive Reader' screen, fill in the fields to set up your Immersive Reader service.

Fill in the details for your service, giving it a name, we used “schoolbox-ir” and set up your subscription settings.  You may need to create a resource group, this isn’t really used.

NOTE: Remember the name, as you will be entering this into Schoolbox on the last step.

3. Once the service is created, we will now need to allow the Schoolbox App access to the service.  Go to the Access Control (IAM) menu, select “Add”. Then you must select the role “Cognitive Services User” and then search for the Application that you created in earlier steps. Once selected, save this role assignment and the Schoolbox app should now have the ability to access your Immersive Reader service.

4. Now return to Schoolbox and enter the following details into the Admin > Settings > 3rd Party Services.

Microsoft Office 365 Tenant ID: This can be found by looking up your Tenant properties.

Microsoft Immersive Reader Name: The name you gave your Immersive Reader service, in the example it was “schoolbox-ir”.

1. Navigate to Microsoft Azure and sign up for the Immersive Reader Service. 

2. Navigate to Administration > Settings > 3rd Party Services.

3. Add your Microsoft Azure Tenant ID and Microsoft Immersive Reader Name.

4. Select 'Save'.

During the "Register a new application using the Azure portal" process you will be asked for the following:

1. Enter the App Name - For example: Schoolbox

2. Enter the Redirect URI (Web) - For example: https://schoolbox.school.edu/ajax/oauth/microsoft

NOTE: The ‘Redirect URL’ should be your website URL.

NOTE: You can add multiple Redirect URIs to the application. This allows you to set up one application to support both your Production and Staging service.

3. Copy the "Application Id" into Schoolbox: Admin > Settings > 3rd Party Services > Microsoft Office 365 App ClientID

For further information, please review the Microsoft information on how to ‘Register a new application using the Azure portal’.

 Secrets

Once your app is registered you will need to create a secret.

1. Select "Certificates & secrets"

2. Select "New client secret"

3. Add a description and select an expiry length - please note Microsoft requires these are renewed every 24 months. 

4. Click Add

5. Copy the secret value and save it into Schoolbox > Admin > Settings > 3rd Party Services > Microsoft Office 365 App Secret

Permissions

1. Select "API permissions"

2. Select "Add a permission"

3. Select "SharePoint"

4. Select "Delegated permissions", then Tick "MyFiles.Read", then "Add permissions"

5. Click "Grant admin consent for [Your School Name]" - both User.Read and MyFiles.Read should then have a green tick as shown below

If the above permission steps have not been entered correctly, you will not be able to access files from OneDrive within Schoolbox. 

Testing it out

You should now be ready to try out connecting to OneDrive from within a Schoolbox file picker.