Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »

HTTPS Required - Microsoft requires the requesting application to be hosted via HTTPS. A FlexDeploy installation only using HTTP will not be able to use Microsoft OAuth.

Create the Application in Azure AD

Register a New App

Navigate to the Azure portal and select Azure Active Directory from the browser. Once there click on App Registrations and register a new app.

Add the Redirect URI

Give your app a name and set the web redirect URI.

This should be your FlexDeploy server with the following path /flexdeploy/rest/v2/oauth

Request Permissions

After clicking register copy the client id and tenant id on the home page of the application. Next click on API Permissions

On the API Permissions screen, click Add a Permission and select Microsoft Graph → Delegated Permissions.

You will need to add the following permissions:

  • IMAP.AccessAsUser.All

  • offline_access

  • SMTP.Send

  • User.Read

You may need your admin to grant consent for the permissions above, which they can do by navigating to the same screen as above and hitting the currently disabled ‘Grant admin consent’ button

Add a Client Secret

Finally, navigate to Certificates & secrets on the left hand panel, create a client secret and copy that to safe location.

Be sure to copy the value of the secret. The secret id is not needed.

Update FlexDeploy System Settings

Match the Server Base URL

First, make sure your FlexDeploy Server Base Url in General Settings matches what you entered in Azure Application redirect. The server base url should NOT include the /flexdeploy/faces/oauth however.

Populate OAuth Information

Next, select Microsoft OAuth for the SMTP and/or IMAP auth type in Email Settings and add:

  1. SMTP/IMAP Username

  2. Client Id

  3. Client Secret

  4. Tenant Id

Authorize and Validate

After populating the necessary fields, click either the Authorize or Re-Authorize buttons. At this point you will be re-directed to Microsoft to authorize FlexDeploy. If everything is successful you should be redirected back to this page:

or

Once authorization is complete, you can test the configuration by clicking on the Test Email Configuration button located at the bottom next to Save.

  • Sends a test email to the logged in user's email address to validate the SMTP OAuth settings.

  • Reads the inbox of the Approval Reply Address to validate the IMAP OAuth settings.

  • No labels