Introduction

This article describes how to access the Insight Personal Archive Outlook Web Add-In in Microsoft Outlook, based on your organization’s authentication configuration. This add-in supports Single Sign-On (SSO) with Azure and OKTA.

• Procedure 1: Accessing Insight Personal Archive Outlook Web Add-in with Azure SSO
• Procedure 2: Accessing Insight Personal Archive Outlook Web Add-in with OKTA SSO

Note: In a hybrid environment, you can use the Web Add-in for macOS users and VSTO add-in for Windows users.

Before you begin

• Microsoft Outlook is installed and running.
• Ensure that your organization provides the Azure and OKTA configuration for authentication.

Procedure 1: Accessing Insight Personal Archive Outlook Web Add-inwith Azure SSO

1. Sign in to the Microsoft 365 admin center with your Administrator account credentials.
2. Go to Settings > Integrated apps, and click Upload custom apps.
   
   
    
3. On the Upload Apps to deploy screen, click Provide link to manifest file, and paste the Web Add-in manifest URL.
   Note: 
      -   Ensure port 10443 is open to connect to the XML configuration file.
      -   The manifest URL varies by data center. Refer to the table below for details.
    

   Data Center	Manifest URL
   USW01	https://auth.lax.archivecloud.net:10443/manifest/us1-GenericEvcOutlookWebAddIn.xml
   USW03	https://auth.us3.archivecloud.net:10443/manifest/us3-GenericEvcOutlookWebAddIn.xml
   EUW01	https://auth.ams.archivecloud.net:10443/manifest/eu-GenericEvcOutlookWebAddIn.xml
   AUE01	https://auth.syd.archivecloud.net:10443/manifest/aue-GenericEvcOutlookWebAddIn.xml
   CAC01	https://auth.ca1.archivecloud.net:10443/manifest/ca-GenericEvcOutlookWebAddIn.xml
   UKS01	https://auth.uk1.archivecloud.net:10443/manifest/uk-GenericEvcOutlookWebAddIn.xml
   AEN01	https://auth.ae1.archivecloud.net:10443/manifest/ae1-GenericEvcOutlookWebAddIn.xml
   QAC01	https://auth.qa1.archivecloud.net:10443/manifest/qa1-GenericEvcOutlookWebAddIn.xml

4. Click Validate and wait until the validation is completed, then click Next.
5. On the Add users screen, under Assign users, choose one of the following options as needed, and then click Next.
      -   Just me
      -   Entire organization
      -   Specific users/group (Use the Search field to find users and groups to view the add-in.)
   
   
    
6. On the Accept permissions requests screen, review the app permissions and capabilities, click Accept permissions, and then, click Next.
   
   
   
   
    
7. On the Review and finish deployment screen, review the information and click Finish deployment.
   
   
    
8. Wait till the deployment is complete and click Done.
   After completing all steps, the Web Add-in is installed and listed as follows:
   
   
    

   Note: The add-in may take a few hours to appear in Outlook and appear in the following manner:

   -  Outlook Desktop: The add-in appears on the Ribbon. Clicking it opens a browser window.
   
              
   
   -  Outlook on the Web: The add-in is available in the context menu of each message and under the More Actions menu. Clicking it opens a new browser tab displaying the Personal Archive.

              
   
             

Procedure 2: Accessing Insight Personal Archive Outlook Web Add-inwith OKTA SSO

1. Sign in to Microsoft Outlook Web.
2. Load the OKTA-enabled Outlook Web Add-In manifest file.
3. Select an email in the reading pane or open a message in a separate window.
4. Click Arctera Insight / Personal Archive.
5. When the Insight Personal Archive outlook Web Add-in is launched, enter your official email address.
   

   The system determines the OKTA SSO based on the loaded manifest file.

   Note: If you are not already authenticated, The OKTA login page is displayed in a secure browser window initiated by the add-in. The appearance and branding of the page may vary based on the organization’s OKTA configuration.

6. Provide your OKTA username and password, or any additional factors (such as multi-factor authentication and so on) configured in OKTA.
   
   Upon successful authentication, the user is automatically redirected to the PA Outlook Web Add-In, and no additional user credentials are required.

Troubleshooting

Troubleshooting

Issue 1: The OKTA login page is not loading.

Solution: If the OKTA sign-in page does not open when you launch the Outlook Web Add-In, verify the following:

• Ensure that the correct OKTA manifest is loaded for the environment.

• Confirm that the OKTA application is configured correctly by following WebAddIn_OKTA_SSO_Setup_Documentation.docx.

• Verify that the user is properly provisioned in OKTA.

• Ensure that the required OKTA configuration is correctly stored in the database and matches the OKTA setup.

Required Configuration:

• clientId
• domain
• redirectUri
• groupid or companyname

For example,

        "clientId": "0oawnf5vbzOP2fCeR697",

        "domain": "https://integrator-7776297.okta.com",

        "redirectUri": https://auth.qa.archivecloud.net:10443/api/auth/okta/callback

        “groupid”: 50010

If any of these values are missing or incorrect, provide the configuration details to the support or development team for verification.

Issue 2: Login failure on the OKTA authentication screen.

Solution: If the OKTA sign-in page opens but authentication fails, verify the following:

• Confirm that the user credentials are correct.
• Ensure that the user is assigned to the OKTA application.
• Verify that the user meets all OKTA security requirements, such as multi-factor authentication (MFA) and password policies.

For detailed instructions on OKTA user and application configuration, see WebAddIn_OKTA_SSO_Setup_Documentation.docx included in the TOI documents.

Issue 3: OKTA login succeeds, but the Personal Archive does not open.

Solution: If the user successfully authenticates with OKTA but cannot access the Personal Archive, verify the following:

• Confirm that the user is configured as an SSO-enabled user in the Personal Archive.
• Restart the browser and try accessing the Personal Archive again.
• Review the backend authentication logs for errors or exceptions:
  AUTH role logs: Z:\LOMA_Apps\Log\EvcOutlookAddIn.log
  Check the log for authentication-related errors or exceptions. If the issue persists, provide the log file to the support or development team for further investigation.