Outlook OAuth2 provider

Prerequisites

git checkout origin/osp-communications .

Warning

To add a new application and get all necessary information for the configuration of the Oauth via azure you have to be admin or be validated by the admin of your system.

Glossary

Tenant : The tenant is the Directory (tenant) ID. You have to pass it to declare the Authority. ClientID : The clientId is the Application (client) ID. You have to pass it so that it is possible to check the client rights (application).

Known error of configuration

Warning

If you get an 535-5-7-139 error you can check this tutorial (https://ourcloudnetwork.com/how-to-fix-error-535-5-7-139-authentication-unsuccessful/). The most common reason you are receiving this error is that the application or device trying to send the email is using SMTP basic authentication. As of 1st October 2022, Microsoft automatically disabled SMTP based authentication in Exchange Online.

Description

Note

An example for a notification configuration is available <a href=”../010_configure-aspsms-notification”>here</a>.

In this tutorial you will learn to :

1. Configure Azure/Outlook to let the module send email through its services

2. Configure the provider

Configuration structure

Steps

Note

Note that Microsoft may change the way things work. This tutorial has been tested the 11 May 2023.

1. Go to your Azure account and configure a new application

1. Go to your Azure portal and login.

2. Go to App registrations.

3. Click on New Registration

4. Give the application the name you want (for exemple OnSphereCommunications) and check Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox). Confirm using the Register button.

5. Save the application Application (client) ID.

6. Go the the API permissions tab of your application

7. Click on + Add a permission

8. Click on Microsoft Graph

9. Click on Delegated permissions

10. Here you will have to add the following settings by checking the box (you can copy paste the text bellow inside the Select permissions text input bar) :

• Mail.ReadWrite

• Mail.Send

• SMTP.Send

11. Verify that it is validated by an admin (under the Status column there should be a green check mark)

12. Once this is done you can click on App roles (side menu).

13. Click on + Create app role. You will have to do this 3 times.

14. Create an app role for SMTP.Send

15. Create an app role for Mail.Send

16. Create an app role for Mail.ReadWrite

17. Don’t forget to fill the fields :

    • Display Name. Fill with a name that makes sense for you

    • Check Both in allowed member types

    • Value. this should be (SMTP.Send, Mail.Send and Mail.ReadWrite)

    • Description. Fill with a description that makes sense for you

Once every thing is configured you can go to the next step.

Warning

If you encounter any configuration problem please contact your Azure AD administrator.

2. Configure the provider using OAuth2

root/providerGmail/provider.coms

{
    "moduleId": "modules.communications.communications-1",
    "providerType": "EMAIL",
    "authenticationConfiguration": {
        "type": "OUTLOOK_OAUTH2",
        "username": "${YOUR_EMAIL}",
        "authority": "https://login.microsoftonline.com/${YOUR_TENANT_ID}",
        "clientId": "${YOUR_CLIENT_ID}",
        "passwordProvider": {
            "password": "${YOUR_PASSWORD}",
            "type": "PLAINTEXT"
        },
        "scope": [
            "https://outlook.office365.com/.default"
        ]
    },
    "sendingProtocol": {
        "type": "SMTP",
        "smtpHostServer": "smtp.office365.com",
        "port": 587
    }
}

root/providerGmail/value.ospp

{
    "name": "OAuth2 Provider Value",
    "description": "",
    "type": "BOOLEAN"
}