VSA Email Parser | OAuth 2.0 for Microsoft O365

Setup in Azure

To connect your parser using OAuth 2.0 in VSA you will have to set up the Outbound Email App in your Azure Portal. Login to https://portal.azure.com using your global administrator credentials.

App Registration

Refer to the below steps/screenshots to register the app.

1. On your Home page, Under Azure services, Click  on Azure Active Directory
2. Under Manage on the left-hand navigation menu, Choose App Registrations > New registration
   
3. Register an Application, provide a name
   • Supported account types: Option 2, Accounts in any organizational directory (Any Azure AD directory - Multitenant)
   • As we are not performing any Oauth authentication on the VSA interface we don’t need to fill the redirect URI
     
4. Click Register
   
5. Copy the Application (client) ID and Directory (tenant) ID from the screen and save it on your notepad
   
6. We will now need to provide Authentication and give API permissions for this app registration in order to access the mailboxes

   

   

   

   

   

Authentication

1. Under Manage on the left-hand navigation menu, Choose Authentication
   
2. Select Yes for Enable the following mobile and desktop flows
   
3. Save

API Permissions

1. On the left-hand side under Manage, Navigate to API Permissions
   
2. Add the permission
   
3. On the Request API permission screen Select Microsoft Graph
   
4. In Graph API choose Delegated permissions
   
5. Permissions needed here are
   
   1. Email
   2. User.Read
   3. POP.AccessAsUser.All
   4. IMAP.AccessAsUser.All
   5. offline_access
      
   6. SMTP.Send
6. Click on Grant admin consent for user and the status for all these permissions will be set to green.
   
   
   
   
   
   

Owners

1. Make sure the user you are utilizing for the outbound email is an owner of the application.

Setup in Microsoft O365

User Permission for Mail

1. On the Microsoft 365 admin center, Navigate to User -> Active Users.
2. Select the User you are going to use for the outbound email.
3. Here go ahead and make sure that the user's MFA is disabled.  Oauth 2.0 does not support MFA-enabled accounts.
4. Also, make sure that the user has a licensed mailbox and active subscription.
5. In the user information go ahead and click on the Mail tab.
6. Once here go ahead and select Email apps. Make sure that the user has all the email apps allowed. 

Setup in VSA

Outbound Email Set Up

1. Go to the System Module within VSA and then proceed over to the Outbound Email section.
2. Click on General and then on Edit to open the email configuration.
3. Set up the Outbound Email with the following settings.
   • Host Name*: smtp.office365.com
   • Port: 587
   • Username: [Email address]
   • Password: [your mailbox password] 
   • Select Enable OAuth 2.0 Authentication
     • Application Id: [Azure application client ID]
     • Directory Id: [Directory (tenant) ID]
   • Select the checkbox for Require SSL?
   • For the Default Sender add the email address same as above.