/gov · Microsoft 365 Integration
Send, analyze, share — without leaving Ledger Copilot.
Most Housing Authorities run on Microsoft 365 — Outlook for email, Excel for spreadsheets, SharePoint for document storage, Teams for staff coordination. We integrate at every surface so the report you generate here ends up where your team already works.
Try it right now
Two live integrations you can test on a sample HAP register without signing in to anything.
The export downloads a UTF-8 CSV that Excel opens natively. The email opens your default mail client with the report body pre-filled. Neither needs Microsoft authentication today — the deeper integrations below require Azure AD app registration.
Integration matrix
Status reflects what's shipped on this prototype. Live integrations work without any Microsoft auth (zero-config for prospects). The Design and Planned tiers require an Azure AD app registration in your tenant — we provide the manifest, you approve the scopes.
Every report page has an Export button that downloads a UTF-8 CSV with BOM. Opens directly in Excel on Windows, Excel Online, Google Sheets, Numbers, or LibreOffice. Preserves number formatting and quoting per RFC 4180.
Direct file download — no Microsoft auth neededClick 'Email via Outlook' on any generated report. Opens your default mail client (Outlook on Windows) with the To/CC/Subject/Body pre-filled. Report body is included as plain text; CSV attachment can be added by the user.
RFC 6068 mailto: URL — no Microsoft auth neededAfter CSV download, paste the URL into Excel Online's 'Open from URL' to view in-browser. For seamless one-click open, we'll move to native .xlsx + Office Online Viewer iframe.
Office Online Viewer (https://view.officeapps.live.com)Generated reports save to the agency's SharePoint document library — accessible to auditors, board members, HUD field staff. Permissions follow the SharePoint site permissions (we never bypass).
Microsoft Graph /sites/{site-id}/drive/items/{item-id}/contentCritical audit findings (anomalies, NSPIRE defects, SEMAP score risks) auto-post to a configured Teams channel as actionable cards. Reduces email overload; surfaces issues where staff are already collaborating.
Microsoft Graph /teams/{team-id}/channels/{channel-id}/messagesEvery continuous-audit report (with its SHA-256 fingerprint) writes to a structured OneDrive folder. Auditors and CPAs can subscribe to the folder for live access without needing a Ledger Copilot account.
Microsoft Graph /me/drive/itemsPHAs running Power BI for board reporting can subscribe to our live data feed — utilization rates, SEMAP indicators, NSPIRE defect trends, AR aging — without separate ETL.
Power BI Streaming Datasets APIOIDC sign-in via Azure AD. Eliminates separate-credential management for agency staff. Required by enterprise security policies at most large PHAs.
Azure AD OIDC + MSAL.jsArchitecture
For agencies that want the deeper integrations (SharePoint save, Teams post, OneDrive sync, SSO), the platform connects through Microsoft Graph using a customer-tenant Azure AD app.
IT admin approves the Ledger Copilot Azure AD app in their M365 admin center. Scopes are minimal and read-mostly: Files.ReadWrite.AppFolder, Mail.Send (optional), Sites.Selected (SharePoint).
First time a user runs a Microsoft-integrated action, they OAuth through MSAL.js. Tokens stay in the user's browser session — we never store Microsoft credentials.
Save-to-SharePoint, send-via-Outlook, post-to-Teams all use the standard Graph SDK. Calls happen client-side or via our session-bound proxy.
Security & compliance
- • No credential storage. Microsoft tokens stay in the user's browser; we never persist them server-side.
- • Tenant-scoped consent. Each agency's IT controls which scopes we have. We can't escalate.
- • Per-user file permissions. Files saved to SharePoint inherit the existing site permissions; we never bypass.
- • Audit-loggable. Every Microsoft action records in our activity log with the user, scope, and target.
- • FedRAMP-aligned. We track Microsoft 365 Government Community Cloud (GCC) requirements where PHA tenants are GCC-hosted.
Microsoft integration roadmap
- • Excel CSV export
- • Outlook mailto: send
- • Native .xlsx export with HUD form templates
- • Excel Online preview embed
- • Azure AD SSO
- • SharePoint document-library save
- • Teams audit-finding bot
- • OneDrive continuous-audit sync
- • Power BI live dataset
- • Word doc generation for HUD letters
Want to scope an integration?
If your agency has a specific Microsoft 365 workflow (e.g., board packet posted to a specific SharePoint site monthly, or NSPIRE inspection results piped into a Teams channel), we can scope it in a 30-minute call.