Breadcrumbs

National Cloud Deployments

sapio365 supports the following National Cloud Deployment environments:

  • US Government GCC High

  • US Government DoD

  • Chine operated by 21Vianet

The GCC environment is supported when you’re using Microsoft’s designated Office 365 Government plans.

Requirements

  1. Create a dedicated application in Entra ID

  2. Enable National Cloud Access for your sapio365 license

By default, sapio365 cannot connect to National Cloud environments.

To enable the National Cloud Setup option, a dedicated sapio365 license is required. If you need access to this option, please contact the Ytria Sales team at customer@ytria.com.

1 - Create a dedicated application in Entra ID

sapio365 uses a public application hosted in Ytria’s tenant, which is hidden and not available in National Cloud environments. To work with a National Cloud, you must register a dedicated application directly in your tenant’s Microsoft Azure Entra ID. After creating the app, copy its Application (client) ID and use it in step 2 of the setup.

Expand this section for detailed, step‑by‑step instructions on registering an application in Microsoft Azure Entra ID.

Register an Application

In Microsoft Entra ID, go to App registrations and select Add (New registration) to register a new application, then provide a name and specify who can use the application.

Set the redirect URI to Public client/native and use the value http://localhost:33366.

image-20240804-200249.png

Once the application is created, you can configure the necessary API permissions by opening the Manifest and modifying the requiredResourceAccess attribute.

image-20240804-200306.png

Replace the entire requiredResourceAccess attribute with the following content, then save the application.

The IDs in the manifest correspond to the permissions used by the sapio365 application.

Note that the following permissions are excluded because they are not available in National Cloud Deployment environments:

  • DelegatedAdminRelationship.Read.All

  • InformationProtectionPolicy.Read

  • ExchangeMessageTrace.Read.All

  • Community.ReadWrite.All


"requiredResourceAccess": [
		{
			"resourceAppId": "00000003-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "d01b97e9-cbc0-49fe-810a-750afd5527a3",
					"type": "Scope"
				},
				{
					"id": "9ff7295e-131b-4d94-90e1-69fde507ac11",
					"type": "Scope"
				},
				{
					"id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182",
					"type": "Scope"
				},
				{
					"id": "572fea84-0151-49b2-9301-11cb16974376",
					"type": "Scope"
				},
				{
					"id": "e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20",
					"type": "Scope"
				},
				{
					"id": "818c620a-27a9-40bd-a6a5-d96f7d610b4b",
					"type": "Scope"
				},
				{
					"id": "02e97553-ed7b-43d0-ab3c-f8bace0d040c",
					"type": "Scope"
				},
				{
					"id": "c5ddf11b-c114-4886-8558-8a4e557cd52b",
					"type": "Scope"
				},
				{
					"id": "afb6c84b-06be-49af-80bb-8f3f77004eab",
					"type": "Scope"
				},
				{
					"id": "12466101-c9b8-439a-8589-dd09ee67e8e9",
					"type": "Scope"
				},
				{
					"id": "a367ab51-6b49-43bf-a716-a1fb06d2a174",
					"type": "Scope"
				},
				{
					"id": "5df07973-7d5d-46ed-9847-1271055cbd51",
					"type": "Scope"
				},
				{
					"id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
					"type": "Scope"
				},
				{
					"id": "204e0828-b5ca-4ad8-b9f3-f32a958e7cc4",
					"type": "Scope"
				},
				{
					"id": "4e46008b-f24c-477d-8fff-7bb4ec7aafe0",
					"type": "Scope"
				},
				{
					"id": "c5366453-9fb0-48a5-a156-24f0c49a4b84",
					"type": "Scope"
				},
				{
					"id": "0e263e50-5827-48a4-b97c-d940288653c7",
					"type": "Scope"
				},
				{
					"id": "e383f46e-2787-4529-855e-0e479a3ffac0",
					"type": "Scope"
				},
				{
					"id": "863451e7-0667-486c-a5d6-d135439485f0",
					"type": "Scope"
				},
				{
					"id": "37f7f235-527c-4136-accd-4a02d197296e",
					"type": "Scope"
				},
				{
					"id": "f6a3db3e-f7e8-4ed2-a414-557c8c9830be",
					"type": "Scope"
				},
				{
					"id": "5a54b8b3-347c-476d-8f8e-42d5c7424d29",
					"type": "Scope"
				},
				{
					"id": "bdfbf15f-ee85-4955-8675-146e8e5296b5",
					"type": "Scope"
				},
				{
					"id": "951183d1-1a61-466f-a6d1-1fde911bfd95",
					"type": "Scope"
				},
				{
					"id": "101147cf-4178-4455-9d58-02b5c164e759",
					"type": "Scope"
				},
				{
					"id": "cc83893a-e232-4723-b5af-bd0b01bcfe65",
					"type": "Scope"
				},
				{
					"id": "d649fb7c-72b4-4eec-b2b4-b15acf79e378",
					"type": "Scope"
				},
				{
					"id": "39d65650-9d3e-4223-80db-a335590d027e",
					"type": "Scope"
				},
				{
					"id": "0c3e411a-ce45-4cd1-8f30-f99a3efa7b11",
					"type": "Scope"
				},
				{
					"id": "767156cb-16ae-4d10-8f8b-41b657c8c8c8",
					"type": "Scope"
				},
				{
					"id": "7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0",
					"type": "Scope"
				},
				{
					"id": "cdcdac3a-fd45-410d-83ef-554db620e5c7",
					"type": "Scope"
				},
				{
					"id": "81594d25-e88e-49cf-ac8c-fecbff49f994",
					"type": "Scope"
				},
				{
					"id": "f81125ac-d3b7-4573-a3b2-7099cc39df9e",
					"type": "Scope"
				},
				{
					"id": "08432d1b-5911-483c-86df-7980af5cdee0",
					"type": "Scope"
				},
				{
					"id": "7e823077-d88e-468f-a337-e18f1f0e6c7c",
					"type": "Scope"
				},
				{
					"id": "b955410e-7715-4a88-a940-dfd551018df3",
					"type": "Scope"
				},
				{
					"id": "7ee7473e-bd4b-4c9f-987c-bd58481f5fa2",
					"type": "Scope"
				},
				{
					"id": "b7887744-6746-4312-813d-72daeaee7e2d",
					"type": "Scope"
				},
                {
					"id": "06dbc45d-6708-4ef0-a797-f797ee68bf4b",
					"type": "Scope"
				},
                {
					"id": "8f44f93d-ecef-46ae-a9bf-338508d44d6b",
					"type": "Scope"
				},
                {
					"id": "8c026be3-8e26-4774-9372-8d5d6f21daff",
					"type": "Scope"
				},
                {
					"id": "eb0788c2-6d4e-4658-8c9e-c0fb8053f03d",
					"type": "Scope"
				}
			]
		},
		{	
			"resourceAppId": "797f4846-ba00-4fd7-ba43-dac1f8f63013",
			"resourceAccess": [
				{
					"id": "41094075-9dad-400e-a0bd-54e686782033",
					"type": "Scope"
				}
			]	
		}
	],


Use Azure Key Vault (optional)

If you want to enable the use of Azure Key Vault as a secure alternative for storing collaboration access data for your tenant, you must add the Azure Key Vault permission user_impersonation. This permission can also be added directly in the manifest.

 {	
			"resourceAppId": "cfa8b339-82a2-471a-a3c9-0fc0be7a4093",
			"resourceAccess": [
				{
					"id": "f53da476-18e3-4152-8e01-aec403e6edc0",
					"type": "Scope"
				}
			]	
		}


Once saved, the API permissions page will list 43 Microsoft Graph permissions and 1 Azure Service Management permission, for which you can then grant admin consent.

These permissions are required for sapio365 to function normally.

You may remove specific permissions if desired, but any features that rely on those permissions will no longer work in sapio365.


image-20240804-200410.png

Copy the Application ID

Finally, copy the Application (client) ID from Overview in order to use it in the next step Enable National Cloud Access for your sapio365 license.

28baae1d-5214-49ef-a333-8ff4d4231b6a.png

2 - Enable National Cloud Access for your sapio365 license

If your sapio365 license includes this capability, connect to the appropriate environment in the Preferences.

You only need to do this once

After you enable sapio365 to use your custom application, it becomes linked to your sapio365 license, so any other sapio365 user who enters that license will automatically use the same application configuration.

  1. Go to Settings → Preferences.

  2. Click National Cloud Setup.

  3. Select your environment.

  4. Enter the application ID you copied.

  5. Enter your sapio365 subscription code.

Once these settings are applied, you can start a sapio365 session in your National Cloud environment, and other sapio365 users in your organization will automatically use the same application configuration as soon as they enter the same sapio365 license.

national-cloud.jpg