Install CXOrelay

Updated July 5, 2026

Who this guide is for

This guide is for you if you want to install CXOrelay so it can monitor your OKRsignal widgets and send email notifications when something needs attention. Installing CXOrelay involves tasks that your IT Admin needs to do, followed by tasks that you will need to do. It assumes no prior experience installing Azure DevOps (ADO) extensions or registering apps in Microsoft Entra.

This guide is split into two sections — Section 1 is IT-admin work

The setup is split into two sections so you can cleanly hand off the admin-only work to the right person on your team:

  1. Section 1 — Tasks for your IT admin / ADO Org admin. Everything that requires Microsoft 365 tenant admin or ADO Organization Administrator permissions: creating a licensed service account, creating a dedicated ADO project, adding the service account as Project Admin, and registering a Microsoft Entra application. Ends with the admin handing the operator four things: the service-account credentials, the MFA second factor, the Entra Application Client ID, and the Directory Tenant ID. One-time, ~15–25 minutes for the admin.
  2. Section 2 — Tasks for the operator (you). Done by the person running CXOrelay, signed in to ADO as the service account: create the dashboard, add the CXOrelay widget, paste in the two UUIDs from your admin, and sign in. ~5–10 minutes.

If you ARE both the admin and the operator, just do Section 1 then Section 2 in order. If not, send Section 1 to your admin and wait for them to deliver the credentials and two UUIDs.

In this guide

  1. Before you start — confirm prerequisites before clicking anything
  2. Recommended deployment pattern — choose between a dedicated service account and a personal account
  3. Tasks for your IT Admin — create the service account, ADO project, and Entra app registration (~15–25 min, one-time)
  4. Tasks for the operator — create the dashboard, add the widget, paste the two UUIDs, and sign in (~5–10 min)
  5. Verifying the setup worked — what a healthy relay looks like, and what to do next
  6. Common gotchas — sign-in failures, empty widget registry, and other first-run issues
  7. FAQs — service accounts, licensing, multi-user setups