| Change type | Description |
|---|---|
| Added in version 25.1 | Added Azure API Permissions for sending and reading email |
On the Mail page, you can work with the following:
Outgoing email
- In case you do not want to enable SMTP Basic Authentication for Microsoft Exchange Online, you can also use EWS App for Outgoing Email settings.
- For Exchange Online, provide the username for the email account used in the From Email Address field. Different email accounts cannot be used to authenticate and send emails.
Provide the following details:
- Outbound SMTP Server
- From Address
- SSL Connection encryption
- SMTP Server Port
- Authentication type – Select either Not Required, Windows, or Specific. For the Specific authentication type, provide username and password.
For the use of Exchange Web Services, provide these server details:
- Azure App ID – The Application (Client) ID of the app registered in Azure for EWS.
- Server – The email server to which the system should connect to send the email notifications.
- Email Address – The email address using which the email notifications will be sent.
- User – The email user on the EWS server.
- Open the Azure app admin.
- Navigate to the Azure portal > Azure AD > Enterprise applications.Note: Azure AD is renamed as Microsoft Entra ID.
- Search for your app (if it does not show up initially, make sure you have selected All Applications, under Application Type).
- Select Properties, in the left menu.
- Select Yes for Enabled for users to sign in?.
Incoming email
For POP3/IMAP, provide these details:
- Server
- Port
- SSL Connection encryption
- TLS Connection encryption
- Email Address - The address to which email approval messages will be sent.
- User/Password – For the email approval user.
Example for IMAP Settings of Exchange Server for Incoming email settings:
-
Server: abc.test.com (exchange server)
-
Port: Port no on which exchange server is configured
-
Allow SSL connection encryption : Yes/No
-
Allow TLS connection encryption : Yes/No
-
Email Address: A valid domain account , which is configured with email address ( abc@test.com)
-
Username: domain\username
-
Password: password of username.
For EWS, provide these details:
- Azure App ID - Application (Client) ID of app registered in Azure for EWS.
- Server - The email server to which the task approval email messages will be delivered.
- Email Address - The email address to which the task approval email messages will be sent.
- User – The user to be used to connect and access the task approval email messages on the EWS server.
Email templates
You can use this page to add new email templates or to edit existing email templates. For more information, refer to the Email Templates.
Email template structure
On the Templates Structure page, Administrators can select the order in which content appears in emails.
To change the Email Template Structure:
- Select Email Template Structure from the drop-down menu.
- In the email body section, change the order of the individual items. For example, to include the process history prior to the Open Task or Approve Email links, cut {{MailRefLink}} and paste it above {{History}}.
- Click Save. You will receive confirmation that you have successfully updated the structure of the email template.
All emails sent after you save the update will reflect the updated structure.
Microsoft Graph API email permissions through the Azure Portal
- Read, create, update and delete inbox messages
- Marking emails as read
- Sending messages
Prerequisites
- An active Azure Active Directory (Azure AD) tenant
- Administrative access to the Azure Portal
Procedure
- Sign in to Azure Portal using your Azure Active Directory administrator credentials.
- Register a New Application
- Navigate to Microsoft Entra ID.
- Under App registrations, click New registration.
- On the Register an application screen, enter the Name.
- Click Register.
- Configure API Permissions
- Go to API permissions and click Add a permission.
- Select Microsoft Graph and then Application permissions option.
- In the permissions list, search and select:
- Mail.ReadWrite – Allows the app to read and write mail in all mailboxes.
- Mail.Send – Allows the app to send mail as any user.
- Click Add permissions to confirm.
- Grant Admin Consent
- In the API permissions tab, click Grant admin consent (for Your Tenant Name).
- Confirm the prompt to authorize the selected permissions across the organization.
- Collect App Credentials
- Under the Overview section, copy the following values:
- Application (client) ID
- Directory (tenant) ID
- Under the Overview section, copy the following values:
- Create a Client Secret
- Navigate to Certificates & secrets > Client secrets tab.
- Click New client secret.
- Enter the Description and select an expiry period (for example, 6 months or 12 months).
- Click Add, then copy the value immediately.
- (Optional) Restrict Mailbox Access with Application Access Policy
- Create and apply an Application Access Policy using Exchange Online PowerShell.
- This limits the scope of mailbox access to specific users or groups.
To refer the official Microsoft documentation, click here.