Scheduling Configuration for ConveyIQ

This topic provides the steps required to configure Scheduling for ConveyIQ. It includes the following sections:

• Overview
• Features
• Requirements
• Configuration Steps
• Security
• Whitelisting

Overview

The ConveyIQ scheduling solution uses a third-party service called Cronofy to request access to calendars in order to surface availability. Cronofy acts as a broker of the data between the Organization’s calendar service and ConveyIQ.

The Client Admin User needs to complete a calendar authorization flow in order to give Cronofy access to the calendars by using a Service Account.

The Service Account Purpose:

• Read free and busy periods from the user’s calendars.
• Create a new "neutral" calendar tied to the Service Account user where all the events, scheduled through ConveyIQ, are: created, updated or deleted. This provides a single place of reference for all the events scheduled through ConveyIQ without cluttering the Organizers' or Interviewers' calendars.
• Act as an Organizer of all the events scheduled through ConveyIQ.

The Service Account Does Not:

• Read the content of the events in the users' calendars.
• Create, edit or delete events from the users' calendars that are not created by ConveyIQ.

The Service Account should NOT:

• Belong to a physical person. This account will also have a calendar that we refer to as a "neutral" calendar and it will carry the name of the Service Accounts' username. We recommend a neutral username, examples: Event Organizer - eventorganizer@domain.com Enterprise Connect Admin - serviceaccount@domain.com
• The Service Account should NOT be a user in ConveyIQ.

Supported Calendar Services:

• G-Suite (Google Apps for Business)
• Microsoft Office 365
• Microsoft Exchange (all versions 2007 SP1 or later)

Features

The following scheduling features are supported in relation to user calendars.

Requirements

Connecting ConveyIQ Scheduling to your Calendar Service requires configuring the following:

• For G-Suite - Downloading the Cronofy Applicationfrom theG-Suite Marketplace.
• Creating aService Account in your Calendar Serviceand set roles and permissions.
• Authorize Calendar Access through the Service Account.

Configuration Steps

• G-Suite Configuration Steps
• Office 365 and Exchange Configuration Steps

Security

All communications between your calendar service and ConveyIQ through Cronofy are performed via HTTPS utilizing 128-bit encryption.

Connection parameters and credentials necessary for establishing the connection are entered in Cronofy directly by the admin user, without ConveyIQ as an intermediary. Cronofy will then grant ConveyIQ delegated access with the user's consent using OAuth2 as an authorization mechanism.

ConveyIQ retrieves the following information:

• From your Service Account calendar information about events created only by ConveyIQ:
  • Calendar id
  • Event uid
  • Summary
  • Description
  • Start time
  • End time
  • Participation status
  • Attendees email
  • Attendees display name
• From all synced user's calendars, ConveyIQ does not retrieve any information related to the context of the events, we only look for:
  • Free periods
  • Busy periods

ConveyIQ will provide the following information:

• Into the Service Account calendar:
  • Event uid
  • Summary
  • Description
  • Start time
  • End time
  • Participation status
  • Attendees email
  • Attendees display name
• Into all the synced user’s calendars, Convey does not directly provide information, instead, your Calendar Service will automatically create events in the interviewers’ calendar once they are invited by the Service Account.

Whitelisting

IP Whitelist - Cronofy uses fixed IP address when communicating with calendar servers according to the data center the calendar service is connected to:

US:

• 3.92.86.8
• 3.93.102.137
• 3.93.204.184

Application Whitelist - Office 365 admin consent link: https://app.cronofy.com/oauth/authorize/admin/office365?client_id=l5-WwoyfeoU-HuFAPgCbOPLCjapL5Sta