Calendar & meetings

Microsoft Teams and Google Meet OAuth, admin consent, and live interview scheduling.

Calendar integrations let recruiters schedule live interviews with automatic Microsoft Teams or Google Meet links. Connections are per-user (delegated OAuth), not org-wide service accounts. Calendar cards live on Settings → Integrations under Calendar & meetings.

Feature gates

Two platform feature flags control availability:

Platform admins grant these per tenant. The API also requires server-side OAuth app configuration:

calendar.capabilities returns enabled, configured, connected, and tenantConsented flags so the UI shows real connect buttons only when both platform grant and server config are present.

Settings path

These slugs are hidden from the ATS integrations grid — they only appear as dedicated calendar cards.

---

Microsoft Teams

OAuth flow

1. Recruiter clicks Connect Microsoft on the calendar card.
2. Client calls calendar.startMicrosoftConnect → receives authorizeUrl + CSRF state.
3. Browser redirects to Microsoft login.
4. Microsoft redirects to /api/auth/microsoft/callback with code + state.
5. API exchanges tokens and stores encrypted row in user_calendar_integrations.
6. UI polls calendar.listIntegrations or reads ?connected=1 query param.

Scopes (user self-consent)

InsightHire requests only scopes any user can self-consent to:

• User.Read
• Calendars.ReadWrite
• offline_access

Teams meeting links are created inline on the calendar event (event.isOnlineMeeting=true), which works with Calendars.ReadWrite alone. The admin-consent-required OnlineMeetings.ReadWrite scope is not requested.

Admin consent

Some Entra ID tenants require tenant-wide admin approval before users can consent.

Option A — Copy admin consent URL

calendar.getMicrosoftAdminConsentUrl builds a link targeted at the customer's tenant domain (e.g. prismcare.com) so IT skips the tenant picker.

Option B — Email IT admin

calendar.emailMicrosoftAdminConsent sends a templated email with the consent link and Reply-To set to the requesting recruiter.

After admin consent, organizations.microsoftTenantConsentedAt is set and other recruiters in the org skip the "IT admin needs to approve" panel.

Disconnect

calendar.disconnectMicrosoft removes the user's Microsoft integration row.

---

Google Meet

OAuth flow

Same pattern as Microsoft:

1. calendar.startGoogleConnect → authorize URL
2. Redirect to Google consent
3. Callback at /api/auth/google/callback
4. Tokens stored in user_calendar_integrations with provider GOOGLE

Scopes

Minimal set for Meet-bearing events on the recruiter's calendar:

• openid, email
• https://www.googleapis.com/auth/calendar.events

No Google Workspace admin involvement required for standard Google accounts.

Disconnect

calendar.disconnectGoogle removes the Google integration row.

---

Scheduling live interviews

Scheduling is implemented in candidate-interviews router. When a recruiter creates an interview:

Location types

Calendar connected vs fallback

If the organizer has a connected calendar for the chosen provider:

• Event created on their calendar
• Candidate receives standard calendar invite (works in Gmail, Apple Mail, Outlook)
• Reschedule/cancel propagates to attendees

If no calendar connected:

• Interview row persisted with metadata.inviteDelivery='ICS_EMAIL'
• .ics email invites sent via interview-ics-emails.service.ts

The schedule modal uses calendar.capabilities to show "auto-create meeting" vs "email invites" hints.

Journey scheduling nodes

Live interviews are scheduled from:

• Candidate profile — Schedule interview action
• Position Schedule tab — /dashboard/positions/[id]?tab=schedule

Scheduling requires at least one of: Teams enabled, Google Meet enabled, or InsightHire Live enabled (ensureMeetingsEnabled).

Per-location gates apply at create time — choosing Teams when only Google is granted returns a precondition error.

Email delivery

• Graph/Google path: provider sends calendar invites
• ICS fallback: InsightHire sends .ics attachments
• Live interview updates/cancels: live-interview-emails.service.ts
• From address for live interview mail: hello@insighthire.com

---

Capability checklist

---

Troubleshooting

Related

• Integrations overview
• Getting started — roles — who can access Settings

External docs

• Microsoft Graph online meetings
• Google Calendar create events