To start using an Outlook email account, a one-time configuration needs to be done first in Azure.
For Outlook OAuth, we require the following field values:-
Tenant (Realm / Directory Id)
Client Id (Application Id)
Client secrets
Username(username can be any email address that you want the system to listen to new incoming emails).
Step-by-step guide to configure Azure account
Register Application
Login to your organizations Azure account.
Select Azure Active Directory in the left-hand navigation, then select App registrations under Manage.
Select New registration. On the Register an application page, set the values as follows.
Set Name to a friendly name for your app.
Set Supported account types to the choice that makes sense for your scenario.
For Redirect URI, set the value that is shown in the MXTS Communication Channel page.
Redirect URI - https://<concern-code>.maxxton.net/customercare/en-us/azure-oauth-callback.html
Choose Register. On the next page, copy the values of the Application (client) ID and Directory (tenant) ID and save them, you will need them later.
-20221209-094054.png?version=1&modificationDate=1670578876327&cacheVersion=1&api=v2)
Copy the values of the Application (client) ID and Directory (tenant) ID and save them,
API Permission
Once the app is registered, then provide the API permissions that are required: -
Select API Permissions in the left-hand navigations under Mange.
Click on ➕ Add a permission , and then click on tab APIs my organization uses.
Search for API name Office 365 Exchange Online.
On the screen you will see two buttons on the screen Delegated Permissions and Application Permissions for the above API.
Select Application Permissions.
Under the Application Permissions search for the IMAP permission and select IMAP.AccessAsApp permission.
At last click on Add permissions.
Also grant the Microsoft Graph → User.read permission (this is the default permission added everytime).
Make sure the below permissions are added:-
https://graph.microsoft.com/User.Read (To read the user basic detail like email)
https://ps.outlook.com/IMAP.AccessAsApp (To read the user emails from outlook)
The API permission requires admin consent if you yourself don’t have admin rights.
Generate client secrets
Once the API permissions are added to the registered application, it's time to generate the client secrets.
Select Certificates & secrets in the left-hand navigations under Mange.
Click on ➕ New client secret.
Add a meaningful description to the secrets, and select expiration time (it is recommended to set expiration time as 6 months).
Click on Add.
Copy the client secret values, which will be in the Values column, and save them; you will need them later.
Client-secret values cannot be viewed except immediately after creation. Be sure to save the secret when it is created before leaving the page.
Once Register Application, API Permission and Generate client secrets all three of this steps are completed you can start setting up outlook account in the communication channel.
Setup communication channel (Video)
Below is the step-by-step video guide for “How to setup Email (Azure / Outlook ) communication channel type.”
The system will take two minutes to begin polling the emails from the mail client server if the communication channel is set to "Enabled" and "Authenticated.”