Zoom + Office 365: Graph API and Domain Association Errors

[ricardoferraz]

Hi community,

We’re trying to integrate Zoom with Office 365 for calendar and contacts sync. However, we’re running into these errors:

• “Your account may not be compatible with the Microsoft Graph API”

• “Zoom association domain does not match O365 verification domain”

This happens when selecting API Graph as the authorization method and using OAuth 2.0.

Important clarification:
We are using a Microsoft 365 account (corporate tenant) – not a personal Outlook.com or Hotmail account. The domain is verified and active in Azure AD.

What we tested:

• Integration works perfectly in a test tenant (Microsoft 365 tenant with minimal restrictions).

• The issue only occurs in the production tenant .

• Zoom is registered as an Enterprise Application in Azure AD.

• Admin consent has not been explicitly granted for Microsoft Graph API permissions.

Question to the community:
Has anyone experienced a similar issue with Office 365 integration?
What settings should we review in the Microsoft 365 Admin Center or Azure AD to allow Zoom to:

1. Access the Microsoft Graph API for calendars and contacts?

2. Pass the domain association check between Zoom and O365?

[storyhub · Accepted solution]

This is a question more appropriate for the Developers Forum at https://devforum.zoom.us/

If this works please click accept as a solution.

[ricardoferraz]

Thanks.

[SmoothSailing11]

Did you find a solution to this?  I'm getting the same error.  This stuff shouldn't be so complicated!

[ricardoferraz]

Hello,

Not yet.
The Zoom Support team asked me to verify the prerequisites below, but I haven’t received any response from the customer.

Requirements for configuring the O365 Graph API Integration

• A Pro, Business, and Enterprise account
• Account owner or admin privileges
• Office 365 account with example Cloud Application permissions, to add Zoom’s Microsoft Entra (Azure AD) Enterprise Application
• To use the MS Graph API Application Permissions integration, your Zoom account must have at least one associated domain that matches a custom domain you have verified in your O365 account
• After adding the calendar service, you may optionally apply Role Based Access Control for Applications in Exchange Online.
• User Principal Name (UPN) of the authorizing user must match the Zoom user account email address. If they do not match, you must approve Mail: Read access in the Zoom web portal to establish the connection. You can then modify application permissions in your Microsoft environment to remove unwanted access.

Related article: Configuring the O365 Graph API Integration
Link: https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0077944