DriveWorks Pro 23

How To: Configure Microsoft Entra ID For Exchange Online Email Authentication (KB26011301)

How To: Configure Microsoft Entra ID For Exchange Online Email Authentication

Microsoft Entra ID is an access management service that provides the essential identity, authentication, policy, and protection to secure users, devices, apps, and resources.

See Microsoft Entra ID for more information.

This topic details the steps required to set up Microsoft Entra ID to allow Exchange Online authentication when sending emails from the following DriveWorks modules:

• DriveWorks Autopilot
• DriveWorks Live
• DriveWorks Pro Server

Prerequisites

The following is required to proceed further:

• Microsoft Entra ID account that has an active subscription.

Microsoft Entra ID Configuration

The following steps are required to configure Microsoft Entra ID for use with the DriveWorks Exchange Online authentication method for sending emails.

1. Create An App Registration

From the Microsoft Entra admin center:

1. Select App Registrations.
2. Click New registration.
3. Enter a Name for the App.

   The Name given to the App Registration should be something meaningful to yourself.

4. Select the required option from Supported account types
5. Click Register.

2. Create a Secret

A Client Secret is required in the DriveWorks application that sends emails.

This is a secret string that the application uses to prove its identity when requesting a token.

With the App (created above) selected:

1. Click Certificates & secrets.
2. Click New client secret.
3. Enter a description for this client secret.
4. Set an Expires date.
5. Click Add.

3. Set API Permissions

In order for DriveWorks to connect to Microsoft Entra ID with the client information provided, ensure the following permissions are set in the API Permissions section of the Microsoft Entra ID application to which you are connecting:

With the App (created above) selected:

1. Select API Permissions.
2. Click Add a permission.
3. From the section APIs my organization uses select Office 365 Exchange Online.
4. Select Application permissions and check the box for SMTP.SendAsApp in the SMTP category.
5. Click Add permissions.
6. With Office 365 Exchange Online listed in the Configured permissions section, click Grant admin consent for <your organization name>, and click the confirmation button.

4. Obtain the Object ID of the account emails will be sent from

The Object ID is required when registering the Service Principal on the Exchange Server.

In Microsoft Entra admin center:

1. Select Users from the main menu.
2. In the Users list select the user that emails will be sent from.
3. Copy the User principal name (email address) value and Object ID key.

   Paste thess values into Notepad for reference.

5. Registering the Service Principal on the Exchange Server

The machine that sends emails using Exchange Online authentication is the Exchange Server.

The Service Principal is required to be registered on the Exchange Server before the DriveWorks module can send emails.

Steps to register the Service Principal

1. On the machine that is the Exchange Server, launch Windows PowerShell.

   Windows PowerShell will need to be Run as administrator

2. Execute the following commands:

   Copy and paste each command into PowerShell and hit enter to execute, wait for the prompt to appear before proceeding to the next command.

   For commands that require terms replacing, copy into notepad to modify.

   Some commands may require additional responses to continue.

   • Install-Module -Name ExchangeOnlineManagement

   • Import-module ExchangeOnlineManagement

   • Connect-ExchangeOnline -Organization <Tenant id>

     Replace <Tenant id> with the value obtained from 1. Create An App Registration above.

   • New-ServicePrincipal -AppId <client id> -ObjectId <obj id>

     Replace <client id> and <obj id> with the value obtained from 1. Create An App Registration and 4. Obtain the Object ID of the account emails will be sent from above.

   • Get-ServicePrincipal | fl

   • Add-MailboxPermission -Identity "EMAIL ADDRESS" -User <obj id> -AccessRights FullAccess

     Replace EMAIL ADDRESS with the email address of the user and <obj id> with the values obtained from 4. Obtain the Object ID of the account emails will be sent from above.

6. Return to the DriveWorks Module to Enter Credentials

Return to the DriveWorks module that will be sending emails and enter the Tenant ID, Client ID (obtained from 1. Create An App Registration) and Client Secret (obtained from 2. Create a Secret ) for the Exchange Online authentication.

• DriveWorks Autopilot - Exchange Online
• DriveWorks Live - Exchange Online
• DriveWorks Pro Server - Exchange Online