How to setup Exchange Web Services (EWS) impersonation sync

This article provides the admin user with steps on how to setup an account to enable impersonation sync in EWS/Office 365. Read Our blog for more on the benefits of using impersonation sync.

An admin user can setup impersonation sync for teams using the steps listed below. This setup can be achieved for EWS/Office 365 only. Once the below steps are taken, please contact the Soup Mail support team to enable impersonation for your team.

Using EWS  to setup impersonation account

1. Office admin/Users: Create a service account (needs at least E1 - Exchange Online Plan 1). Set its password to not require reset on first login. Ideally allow its pw not to expire. 
2. In Exchange admin center: 
   1. In permissions > admin roles, create a new role called "Soup Mail sync" and give it the ApplicationImpersonation role 

      

      2. Add the service account as a member and click "Save"
      

 Using powershell to set password to not expire

1. Open Powershell as administrator 
2. Run commands 
   1. Connect-MsolService 
   2. Set-MsolUser -UserPrincipalName [e-mail] -PasswordNeverExpires $true 

You can find useful links for this process below: 

• http://cloudfinder.com/user-impersonation-settings-office-365/ 
• For Office 365, here's how to set a user's pw not to expire: https://support.office.com/en-us/article/Set-an-individual-user-s-password-to-never-expire-f493e3af-e1d8-4668-9211-230c245a0466