To enable Microsoft Teams meeting generation from the Intellek LMS, the following configuration must be completed within Microsoft Entra and Microsoft Teams

Prerequisites

Before Teams meeting links can be generated from the LMS, your IT team must:

•Add the required Microsoft Graph application permissions to the Intellek Entra application.

•Create or identify an Entra security group containing users who are authorized to create Teams meetings through the LMS.

•Configure a Teams application Access Policy that allows the Intellek application to create Teams meetings on behalf of users in the designated group.

•Advise Intellek this work has been completed.

Important: Granting the required Microsoft Graph permissions alone does not provide access to create Teams meetings for users. Access is further restricted through a Teams Application Access Policy for Entra group membership.

Entra Application Permissions

The required permissions can be added to the existing Intellek Outlook integration application. If this application does not exist, the permissions can instead be added to the  existing Intellek Single Sign-On (SSO) application.

Required permissions for Teams Integration:

Add the following Application Permissions and grant administrator consent:

OnlineMeetings.ReadWrite.All
OnlineMeetingArtifact.Read.All
User.Read.All

Entra Security Group

We recommend creating a dedicated Entra security group to control which users can create Microsoft Teams meetings from the LMS.

Although an existing security group may be used, you must record the group's Object ID, as it will be required during policy configuration.

Steps:

1.Create a new security group (recommended) or identify an existing suitable group.

2.Record the group's Object ID.

3.Add all LMS administrators or other users who should be permitted to create Teams meetings through the LMS.

Only uses who are members of this group will be authorized to create Teams meetings via the LMS.

Teams Application Access Policy

A one-time PowerShell configuration is required to authorize the Intellek application to create Teams meetings on behalf of the users in the designated Entra group.  

Install the Microsoft Teams PowerShell Module

Install-Module MicrosoftTeams

Connect to Microsoft Teams

Connect-MicrosoftTeams

Create the Application Access Policy

New-CsApplicationAccessPolicy -Identity "IntellekLMSMeetingPolicy" -AppIds "[CFM Entra Application ID for Teams/Outlook Integration]" -Description "Allow Intellek LMS to create Teams meetings via MSGraph"

Assign the Policy to the Entra Group

New-CsGroupPolicyAssignment -GroupId "Group-Object-ID e.g. c13af9ad-d197-4c73-ad3a-954e88576937a" -PolicyType "ApplicationAccessPolicy" -PolicyName "IntellekLMSMeetingPolicy"

Verify the Configuration

Run the following command to verify that the policy was created successfully:

Get-CsApplicationAccessPolicy -Identity IntellekLMSMeetingPolicy

Notify Intellek

Once these steps are complete, email [email protected]. Once we receive your information, we will enable Teams integration for your LMS instance.

Ongoing Administration

The designated Entra security group controls who can create Teams meetings through the LMS.

Your IT department is responsible for maintaining membership of this group.

Examples:

•Add new LMS administrators when they require access to create Teams meetings.

•Remove users who leave the organization or no longer require access.

•Periodically review group membership to ensure only authorized users retain access.

Only users who are members of the designated Entra security group will be able to create Microsoft Teams meetings through the LMS.

Security Model

This configuration ensures that, while the Intellek application is granted the necessary Microsoft Graph permissions, the ability to create Teams meetings is restricted to approved users through group-based access control.

Data Accessed and Stored by Intellek for Teams Meetings

Intellek follows the principle of least privilege and retrieves and stores only the information required to support Microsoft Teams meeting integration and attendance reporting.

Entra Intellek Application Credentials

•Tenant ID

•Application ID

•Application password

Meeting Creation

•Meeting ID

•Meeting join link

•Meeting join ID

•Meeting join password

Attendance Reporting

For meetings associated with the LMS calendar, Intellek retrieves and stores attendee information using:

•Microsoft Entra ID Tenant ID

•Meeting ID

No additional meeting content, chat messages, files, recordings, or user mailbox data are accessed through this integration.

LMS Administrators can enable CE Manager (CEM) compliance tracking for any course type (General, SCORM, AICC, or Scheduled) that should be included in CE Manager reporting. When creating or editing a course, select the "Tracked in CE Manager" option on the Course Detail page. Once enabled, a corresponding course or session is automatically created in CE Manager.

Coordinated Workflow between Intellek LMS and CE Manager

After an LMS course is replicated in CE Manager, a corresponding course entry is created. A CE Manager administrator must then assign the appropriate compliance license and credits to each course or session created in CE Manager. Once this information is configured, it is synchronized back to the LMS through an overnight process. LMS users can then launch or enroll in the LMS course or event.

Tracking LMS Courses in CE Manager

1.Navigate to the Library page.

2.Add a new Course (General, SCORM, AICC), or Edit an existing Course.

3.On the Course Detail page, select Tracked in CE Manager.

Course Detail - Tracked in CE Manager

4.Complete any remaining course details as needed, then select Save. A corresponding course is automatically created in CE Manager.

5.The CE Manager administrator must then assign the appropriate compliance license and credits to the course in CE Manager.

6.When Users complete the learning in the LMS, their completed statuses are shared and updated in CE Manager.

Tracking LMS Events in CE Manager

Events can be tracked in CE Manager by checking the option at the Scheduled course level in the LMS:  

1.Navigate to the Library page.

2.Add a new Scheduled course or Edit an existing one.

3.On the Course Detail page, check Tracked in CE Manager.

Scheduled Course Detail - Tracked in CE Manager

4.Complete any remaining course details as needed, then select Save. A corresponding course is automatically created in CE Manager.

Note: The CE Manager administrator assigns the appropriate compliance license and credits to each of the sessions (locations) once they are generated in the LMS Calendar.

Adding Events to the Calendar

When events are added to the Calendar for a scheduled course that is "Tracked in CE Manager", the LMS sends event location details to CE Manager, and a separate session is created in CE Manager for each location. For example, if an LMS Event includes both a New York location and a webinar, two sessions will be created for the course in CE Manager. A CE Manager administrator must then assign the appropriate compliance license and credits to each session before users can enroll in the Event.

For example, below is a Scheduled course replicated in CE Manager, with '0' sessions listed:

Once the Event is is added to the LMS Calendar and replicated, CE Manager creates sessions for location(s), i.e. New York and webinar .

Course/Event Completion Tracking

When a user completes an LMS course or attends an LMS Event and is marked as finished, the LMS sends the completion records to CE Manager via API for compliance tracking and reporting. The user's email address is used to match records between the LMS and CE Manager; data is synchronized only when the email address matches exactly in both systems.