Page History

The From field in MSPbots emails in MSPbots , notifications, and reports is customizable to use your company email instead of the default default support@mspbots.ai. This article shows how to change the sender's email address using the OAuth2 method for more secure authorization. 

What's on this page:

Background information 

...

OAuth (Open Authorization) 2.0 is the modern standard to allow a website or application to access resources hosted by other web apps on behalf of a user. It adds security by providing consented access and restricting client actions performed on resources without sharing the user's credentials. 

Now that basic authentication will be disabled and OAutho OAuth 2.0 is the new de facto industry standard for online authorization, MSPbots offers an option to add an extra authentication step in setting up the SMTP configuration for modifying the the From field address for outgoing emails and sending reports. Users now have the option to use OAuth 2.0 in the Outgoing Mail settings.

If you prefer using only the basic authentication to modify the Outgoing Mail settings, refer to the article How to Configure the Outgoing Mail Using Basic Authentication. 

Prerequisites for editing the Outgoing Mail settings 

...

You must have the following to perform the procedure below: 

• Admin permissions 
• Inclusion in the Azure Active Directory (AAD) 
• Outlook 365 license 
• Application and developer roles for configuring the AAD 

Gathering the MS OAuth 2.0 credentials for authorization

...

Follow these steps to generate the required information:

...

1. hostnamePrepare the redirect uniform resource identifier (URI) which will handle the callback from the authorization server after the user grants permission. You must configure the redirect URI correctly to receive the authorization code or access token securely.  
   An example of a redirect URI is 
        https://yourapp.com/oauth/callback
   where yourapp.com is the hostname. is https://app.mspbots.ai/web/um/smtp/redirect. Once the authorization is successful, Microsoft will use this URI to notify MSPbots about the authentication result. 

   You can find this information with the following steps:

   1. Go to Settings > System > Outgoing Mail in MSPbots.
      Image Added
      
      

   2.  Click v icon beside the +Add button and select OAuth2.
      Image Added
      
      

   3. Anchor
      Redirect URI Redirect URI

      When the Add window opens, go to the Redirect URI field, copy the given URL to Notepad, and save it on your Desktop. You will need this later when adding a New registration. 
      Image Added
       

2. Sign in to the Microsoft Azure portal and secure the credentials needed for the OAuth 2.0 authorization. 

3. Create a new app registration. 

   1. On the Microsoft Azure homepage, click App registrations. . If you can't find App registrations on the page, search for it in the search bar.
      

   2. When the App registrations page opens, click the +New registration tab. 
      

   3. In the Register an application form:

      1. Name - Enter a Name unique namefor your application. 

      2. Supported account types -Select Account in this organizational directory only (MSPbots.ai only - Single tenant) from the options for Supported account types.   

      3. Enter the redirect URI from Step 1Redirect URI (optional) - In the first box, select Web, and in the second box, enter the Redirect URI copied from Step 1.c.

      4. Click Register. 
         

      The Application (client) ID will be shown after your registration is done. Take note of this ID. 

4. Next, go to Certificates & secrets

   in

   on the sidebar menu, then click +New client secret on the right under the Client secrets tab.

    

   
   Image Modified

   1. Anchor
      idandsecret idandsecret

      On In the Add a client secret window: 

      1. Description - Add a description. 

      2. Expires - Select an expiry date from the Expires  dropdown menu. 
         Image Modified

         Note
         Before the secret expires you must create a new secret and apply it to the MSPbots Outgoing Mail settings.

      3. Click the copy icon to copy the generated Value and Secret ID. You will use these values Add located at the bottom of the Add a client secret window.
         
         

   2. The addition is successful once the Update application credentials pop-up window appears. 
      Image Added
      

   3. Anchor
      Value Value

      Click the copy Image Addedicon in the Value column to copy the value to Notepad and save it on your Desktop.  You will need this value later when configuring OAuth 2.0 in the mail settings. 
      Image Removed.
      Image Added

5. Next, go to API Permissions on the sidebar menu.

   1. Click the +Add a permission button. 
      Image Added
   2. In requesting API permissions window, go to the Microsoft APIs tab and select Microsoft Graph.
      Image Added
   3. Next, select Delegated permissions.
      Image Added
   4. Enter SMTP in the search bar under Select permissions, then click SMTP and select SMTP.Send.
      Image Added
   5. Enter IMAP in the search bar under Select permissions, then click IMAP and put a checkmark IMAP.AccessAsUser.All.
      Image Added
   6. Click the Add permissions button.
   7. The permissions you added will appear in the Configured permissions list.
      Image Added
6. Next, go to the Overview.

   1. Anchor
      Application (client) ID Application (client) ID

      Click the copyImage Addedicon next to the Application (client) ID to copy the value to Notepad and save it on your Desktop. You will also use this value for creating the OAuth 2.0 credential in the mail settings. 
      Image Added
      
   2. Click the Endpoints tab.
      Image AddedNext, go back to the Overview and click the Endpoints tab.

   3. Anchor
      authandtokenurl authandtokenurl

      Copy the OAuth 2.0 authorization endpoint (v2) and the OAuth 2.0 token endpoint (v2) to your local desktopNotepad and save it on your Desktop, such as Notepad. You will also use these values for creating the OAuth 2.0 credential in the mail settings. 
      Image Removed
      

      Set API Permissions:

   4. Navigate to API permissions on the sidebar menu and click the Add a permission button on the API Permissions page of your application. 

   5. Select the Microsoft APIs you need access to. Example: Microsoft Graph

   6. Next, select Delegated permissions and enter SMTP.Send in the Select permissions field. 

   Click the Add permissions button. 
   Image Added
   

Anchor
Setting up OAuth 2.0 in MSPbots Setting up OAuth 2.0 in MSPbots

Setting up OAuth 2.0 in MSPbots 

...

1. Open the MSPbots app and go .
2. Go to Settings > System. Click , and click Outgoing Mail in the upper right corner of the Settings tabSystem page.
   Image Added
   
   
3. Click Add v v icon on the right side of the +Add button and select OAuth2. 
   Image RemovedImage Added
   
   
4. Fill in the following fields :in the Add window. 
   1. Host Name - Use the information in Step 1 of the previous sectionThis value is pre-filled.
   2. Authorization URL and Token URL - Use the values from Step 36.h of c of the previous section. 
   3. Redirect URI - This value is pre-filled. 
   4. Client ID - Use the values from Step 6.a of the previous section. 
   5. and Client Secret - et Use the values generated in in Step 34.fc of the previous section. 
   6. Username - Enter your username. 
   7. Reply to -  Enter your preferred email.
   8. Signature - Input your signature. 
      
5. Click Authorize. 
6. When the confirmation pop-up window opens, click Continue. 
7. On the Microsoft login screen, enter the user password you provided in the OAuth 2.0 credential and click Sign Inin. 
8. Click Accept in the Microsoft pop-up window with the requested requesting permissions for MSPbots. 
   Image Added
9. The message Authentication successful oauth redirect success appears. 
   Image Added
   
   

Verifying if the authentication is successful 

...

To Go back to MSPbots and refresh the Outgoing Mail page to verify if the configuration works, refresh the mailbox list page. The mailbox status should show show Verified for a successful authentication. If the status is Not Verified, repeat Step 4 onwards repeat Setting up OAuth 2.0 in MSPbots until the authorization is successful. 

Image Added

Related Topics 

...