Our goal is to have our customers grant permission to access their email on an Exchange 2013 server with OAuth, without us having to store the customers' usernames and passwords. We already do this for Gmail and it works well and is easy. I'm anticipating a workflow like:
- Customer comes to our site and clicks "Connect with Exchange".
- Our server redirects to an Exchange-hosted site on the target domain.
- User grants permissions.
- Exchange redirects back to us with OAuth tokens in the payload.
- Use these tokens to access user's email on that server via EWS.
Is this workflow supported by Exchange 2013? Is this available by default or does it require "configuration" on the Exchange side? (For instance, most Exchange servers need IMAP to be explicitly configured while EWS seems to be on by default.)
