Integration
Cerebric Microsoft Teams Integration
Cerebric TeamThis page documents Cerebric's Microsoft Teams integration for tenant administrators evaluating admin consent. It describes what the integration does, the Microsoft Graph permissions it requests, how organisations install and uninstall it, what data we store, and how to verify the integration end-to-end with a test account.
1. Overview
Cerebric automatically generates Microsoft Teams meeting links for video appointments booked through our scheduling system. Practice administrators connect their organisation's Microsoft account once via OAuth; every subsequent video booking gets a Teams link generated via Microsoft Graph's onlineMeetings endpoint and embedded in the patient's confirmation email.
2. Who uses Cerebric
Cerebric is a clinical platform for psychology, psychiatry, and therapy practices. End users of the integration are clinicians, support staff, and clinic administrators who manage scheduling. Patients receive booking confirmation emails containing the generated Teams link but never interact with the integration UI directly.
3. How users install the integration
Open Video Meetings settings
An organisation administrator signs in to Cerebric and navigates to Team → Scheduling → Video Meetings.
Click Connect with Teams
The Connect button starts the OAuth flow on the organisation's Microsoft 365 account.
Authorise on Microsoft
Microsoft shows the requested delegated permission (OnlineMeetings.ReadWrite) and the connecting account. Tenant administrators reviewing for admin consent see the same scope. After approval, Microsoft redirects back to https://app.cerebric.io/api/oauth/microsoft/callback.
Cerebric wants to access your Microsoft account
- Create Microsoft Teams online meetings on your behalf
OnlineMeetings.ReadWrite
Connection confirmed
Cerebric shows a green “Connected” badge on the Microsoft Teams row plus the connected account email. Future video bookings will generate Microsoft Teams links automatically.
Reviewer note: The redirect URI above is the only callback registered in our Azure AD app registration. It must appear in the registration's Authentication redirect URIs.
4. How users use the integration
Once connected, every video booking created in Cerebric automatically generates a Microsoft Teams meeting on the connected organisation account. The flow is fully server-side; no clinician or patient action is required.
- The Teams meeting is created at booking-creation time via
POST /me/onlineMeetingson Microsoft Graph. The resultingjoinWebUrlis the join URL. - The join URL and Graph meeting ID are stored on the
Bookingrecord. - The link is included in the patient's booking confirmation email, reminder emails, and any reschedule notifications.
- Meetings are created on the connected service account (a dedicated bookings account), not on individual clinicians' personal Microsoft accounts.
Booking detail with auto-generated Microsoft Teams link.
5. How users uninstall
There are two independent ways to remove the Microsoft Teams integration. Both result in Cerebric deleting the stored credential.
A. From Cerebric (primary path)
- Go to Team → Scheduling → Video Meetings.
- Click Disconnect next to the connected Microsoft account.
- Cerebric immediately deletes the encrypted access and refresh tokens and clears
videoProvideron the organisation settings record. - Future bookings will not generate Teams links until the organisation reconnects.
B. From Microsoft (revoke admin consent)
A tenant administrator can revoke Cerebric's consent at any time from the Azure portal under Microsoft Entra ID → Enterprise applications → Cerebric → Permissions, or an individual user can revoke at myaccount.microsoft.com/consent. On the next refresh attempt, Cerebric receives an invalid_grant response from Microsoft's token endpoint, treats the connection as revoked, and deletes the stored credential. The behaviour from that point onwards is identical to disconnecting from inside Cerebric.
6. OAuth scopes requested
The integration requests the minimum delegated permission required to create Teams meetings on behalf of the connected account.
| Scope | Purpose | What we do NOT do |
|---|---|---|
OnlineMeetings.ReadWrite (delegated) | Create Microsoft Teams online meetings via POST /me/onlineMeetings on Microsoft Graph to obtain a join URL for each Cerebric video booking. We may also delete or update the meeting if the booking is rescheduled or cancelled. | We do not read, list, or modify the user's mail, calendar, files, contacts, OneDrive, SharePoint, or directory data. We do not request Mail.*, Calendars.*, Files.*, or User.Read.All scopes. We only operate on Teams meetings Cerebric itself created. |
We additionally request the standard OpenID Connect scopes (openid, profile, email, offline_access) to identify the connecting account and to obtain a refresh token for long-lived access.
7. Data handling and storage
What we store per connected organisation
- OAuth access token (encrypted at rest, AES-256-GCM)
- OAuth refresh token (encrypted at rest, AES-256-GCM)
- Token expiry timestamp
- Connected Microsoft account email and tenant ID (plaintext, used to display the connection in settings)
- Provider name (e.g.
"microsoft")
What we generate and store on bookings
- Meeting join URL (plaintext)
- Microsoft Graph online meeting ID (plaintext, used to update or delete the meeting when the booking is rescheduled or cancelled)
Retention
- Tokens are deleted immediately when an organisation disconnects from Cerebric or when Microsoft reports the grant as revoked.
- Generated meeting URLs and meeting IDs are retained on the
Bookingrecord for the lifetime of that record per Cerebric's standard data retention policy. See our privacy policy for full details.
8. Reviewer test instructions
Reviewers can request a test account at app.cerebric.io by emailing support@cerebric.io. Tenant administrators evaluating admin consent can also run through the steps below in their own tenant using a regular user account, since the integration only requests delegated permissions.
To verify the integration:
- Sign in to Cerebric as an organisation administrator.
- Navigate to Team → Scheduling → Video Meetings.
- Click Connect with Microsoft Teams.
- Authorise using your own Microsoft account on the consent screen.
- Confirm the connected account email is displayed in Cerebric settings with a green “Connected” badge.
- Navigate to Patients → “Test Patient” → Bookings → New Booking and create a video booking.
- Verify a Teams join URL is generated and displayed on the booking detail.
- Open the generated link in a separate browser to confirm it joins a valid Teams meeting.
- Return to Team → Scheduling → Video Meetings and click Disconnect.
- Confirm the credential is removed (the “Connect with Microsoft Teams” button reappears) and that no further bookings generate Teams links.
- (Optional) Revoke admin consent in the Azure portal and confirm Cerebric clears the credential the next time a booking is created.
9. Support and contact
- Integration questions and reviewer enquiries: support@cerebric.io
- General contact: cerebric.io/contact
10. Change log
Last reviewed: 2026-05-03.