Skip to main content

Configure SMTP with OAuth using Microsoft Exchange Online

Microsoft Exchange Online deprecated basic authentication for SMTP in March 2026; OAuth is the standard. iGrafx Process360 LiveProcess360 Live iGrafx's cloud platform for end-to-end process management — combining process design, mining, simulation, and automation in a single environment. still supports SMTP basic authentication, and also supports SMTP with OAuth — through Microsoft Exchange Online only.

note

Sending email over SMTP with OAuth is supported through Microsoft Exchange Online only. No other providers are supported.

Prerequisites​

  • Azure permissions to create an app registration and a service account.
  • An Azure tenant admin to approve the API permissions.
  • Exchange Online PowerShell (installation commands are in this article).

Supported versions​

  • Process360 LiveProcess360 Live iGrafx's cloud platform for end-to-end process management — combining process design, mining, simulation, and automation in a single environment. 19.20 and later.

Configuration​

Register an Azure application​

  1. Sign in to the Azure portal, search for App registrations, and open the service.
  2. Click + New registration.
  3. Under Supported account types, select the option that fits your organization, then click Register.
  4. Open the new app registration. On Overview, copy the Application (client) ID and Directory (tenant) ID and store them securely.

Create a client secret​

  1. In the app registration, go to Manage → Certificates & secrets → Client secrets.
  2. Click + New client secret, enter a description, and choose an expiration that fits your security policy.
  3. Click Add.
  4. ⚠️ Copy the secret value immediately and store it securely — the value, not the secret ID.

Grant API permissions​

  1. In the app registration, go to Manage → API permissions and click + Add a permission.
  2. Select APIs my organization uses and search for Office 365 Exchange Online; select it.
  3. Select Application permissions, expand SMTP, and select SMTP.SendAsApp.
  4. Click Add permissions.
  5. A tenant admin must approve them: in the app registration's API permissions, select the new permission, then click Grant admin consent for {organization}.

Add a service account​

  1. Get the app registration's Object ID (different from the Application client ID): in Azure, open Enterprise Applications → All applications, search for your app registration, open it, and copy the Object ID from the Overview page.

  2. On a Windows machine, install and connect Exchange Online PowerShell (replace <TENANT_ID> with the Directory (tenant) ID):

    Install-Module -Name ExchangeOnlineManagement
    Import-Module ExchangeOnlineManagement
    Connect-ExchangeOnline -Organization <TENANT_ID>

  3. Create the service account (replace the placeholders with the Application (client) ID and the Object ID):

    New-ServicePrincipal -AppId <APPLICATION_CLIENT_ID> -ObjectId <OBJECT_ID> [-Organization <TENANT_ID>]

  4. Get the new service account's details and copy its ObjectId (⚠️ different from the previous Object ID — this one is the service principal's):

    Get-ServicePrincipal | fl

  5. Give the service account access to a mailbox (<SERVICE_PRINCIPAL_ID> is the ObjectId from the previous command):

    Add-MailboxPermission -Identity "mailboxAddress@example.com" -User <SERVICE_PRINCIPAL_ID> -AccessRights FullAccess

Configure Process360 Live​

  1. Open Admin → Email Management → Email Settings.
  2. Under Outgoing Email Settings:
    • Sender Display Name — must exactly match the service account's display name (if none was set, it's likely the email address).
    • Sender Email Address — the service account's email address.
    • Subject Prefix — your custom value.
    • Send Error Email to — optional address for send-error notifications.
  3. Under Server Details, select SMTP.
  4. Under Authentication, select Microsoft Exchange Online.
  5. Enter the client ID, client secret, and tenant ID from the earlier steps.

Verify​

Enter a Test Email Target Address and click Send Test Email. A green success message appears at the bottom; a failure shows a red error. Once the test arrives, click Save Email Settings.

Troubleshooting​

  • No email received — confirm the success message appeared, and check your junk/spam folder. Your IT department may be filtering the messages.
  • Authentication unsuccessful — recheck all credentials, including the Sender Display Name and Sender Email Address. If no display name was set for the sender, try the sender's email address as the Sender Display Name.
  • For anything else, follow Microsoft's guide to set up an app registration and service account. ⚠️ Use the Client Credential Grant Flow — other flows don't work with Process360 LiveProcess360 Live iGrafx's cloud platform for end-to-end process management — combining process design, mining, simulation, and automation in a single environment..