IMPORTANT: Deprecation of Microsoft’s Basic Authentication for SMTP (Exchange Online)
Your email setup in EventsAir needs to be upgraded if you have a custom email domain setup in EventsAir (i.e., you use Outlook/Office365 mailboxes OR Exchange Online SMTP settings in your email setup).
OLD SYSTEM: Basic Authentication (username/password)
NEW SYSTEM: OAuth2 Authentication (client credentials/token-based)
All affected SMTP accounts must transition to using OAuth2 authentication so that emails will continue to work.
You’ll need:
Admin access to Azure Entra ID
Admin access to Exchange Online
Some help from your IT department or a basic understanding of Azure Entra ID and creating new Service Principals in Exchange Online.
Azure Entra ID Setup
Set up and register an App in Azure Entra ID. This will be your SMTP sending app.
Grant API Permissions
In the App Registration, grant the permission SMTP.SendAsApp
Generate a Client Secret
Create a new client secret and store the value securely (you’ll need this later in EventsAir). Note: You can’t see this again after leaving the page.
Create a Service Principal in Exchange CLI
Link the App Registration to Exchange Online by creating a corresponding Service Principal in Exchange. Refer here for more information Authenticate an IMAP, POP or SMTP connection using OAuth
Grant Mailbox Access to the Service Principal
Assign the Service Principal Full Access / Send permissions on the mailbox(es) that will send mail. (Refer to the Microsoft help article above if needed.)
EventsAir setup
Once the above Azure setup is complete, enter the following details in EventsAir under Application Setup > External Connections > Email Account Setup for each relevant email account.
SUMMARY OF THE ABOVE:
FIELD IN EVENTSAIR | VALUE |
SMTP Server |
|
SMTP Port |
|
Authentication Type |
|
Client ID | From the Azure App Registration |
Client Secret | From the Azure App Registration (ensure it’s copied before expiry) |
Tenant ID | Your Azure Entra ID Tenant ID |
Scope | |
Mailbox Address | Email address with FullAccess rights granted to the app |