Table of Contents

To connect to the panagenda OfficeExpert Web Interface, you have to enter the hostname (FQDN, see: Network Settings in Starting the Virtual Appliance) of the appliance into your web browser's address bar. panagenda OfficeExpert uses HTTPS for secure communication between its appliance and its web interface. For this reason, you have to accept the security certificate to proceed.

There is also a video at the bottom of this page which demonstrates all the steps.

Accessing the UI

In order to continue with the setup process, you need to register an Azure AD app first. When you access the OfficeExpert URL for the first time, you will be asked to enter the following information (see also screenshot below):

  • Azure AD Tenant ID
  • Azure AD App ID
  • Application Password

You can register an Azure AD app either manually or automatically:

OPTION 1: Automated Azure AD App Registration

OfficeExpert can create this application automatically. During the automated creation process, OfficeExpert will perform the following steps:

This process will create a client secret. If you want to use a certificate for authentication, you need to adjust this manually afterwards (see here).
  1. A new Azure AD App called "panagenda OE Appliance" is registered.
  2. The application is granted certain permissions for data retrieval. For more details, refer to the next section on manual application registration.
  3. You need to log in and grant consent for this application as a Tenant Administrator.

    If you are not a global administrator, the registration process will fail!

To initiate the automated Azure AD App registration:

  • Click on Add Azure Application

  • Click on Continue and sign in with a global administrator account to start the automated creation and deployment of the Application on the Microsoft Azure environment. All the fields are filled in automatically during this process. Usually, the process is completed after 15 seconds at most.

In certain Azure environments, this may take longer and you will see a Microsoft notification stating "Sorry, but we're having trouble signing you in". You can either wait for a few more seconds and press F5 on your keyboard, or sign in to the Azure portal and click on "Grant rights".
  • The following dialogues will appear. Please click on Accept on both windows:

    Note that there is no need to accept the checkbox "Consent on behalf of your organization"!

    Just click on the Accept buttons to finish the automated registration process.

  • When done, you can close the pop-up window. Now you see data in all three fields. Please click on Confirm to continue.

OPTION 2: Manual Azure AD App Registration

Please fill in the Azure AD App ID and Application Password of your manually registered Azure Active Directory Application. For more details, refer to the following knowledge base article Manual Azure AD Application Registration for OE Appliance for New Setups.

Assigning OfficeExpert Admins

The last step before you can log in to OfficeExpert UI is to assign OfficeExpert Admin(s) to this new created Azure AD App. Please follow the following link for these steps: User Role Mapping.

When done, click on Login screen:


From now on, only the users assigned in the application as Administrator or Viewers (and users with an assigned partition) are able to access the panagenda OfficeExpert web interface.

Uploading the License File

When you log in for the first time as an administrator, you will be redirected to the license upload mask (later accessible via Settings > License). Upload your OfficeExpert license file by clicking in the corresponding area or by dragging and dropping the file to this area.


Confirm the license agreement to proceed:

Note that the available menu items depend on your OfficeExpert license.

Analytics Settings Page

After uploading the License file, you will be redirected to the Analytics Settings Page. Make sure that you enter a tenant name and click Test Credentials. If this is successful, please click SAVE at the bottom of the page.

If you have a Teams Analytics license, panagenda will provide you with a Key Vault URL, which comes from the Azure Lighthouse Deployment, which you just enter here. In addition, enable the Teams Analytics checkbox as well and click Save again.

After saving the settings, make sure to restart the virtual appliance of OfficeExpert (ssh:  reboot now).