››

Modern Authentication – OAuth 2.0 Configuration for SMTP – Beta Release

First published on: 03/20/2025/2:46 pm

Note: The steps below allow users to configure emailing specific message types from the iDocuments application, but currently exclude peripheral processes such as:

- The scheduled process that sends email reminders

- Forgotten password/MFA reminders

These will follow and use the same settings as below.

Mailbox pre-requisites

The following must be done for each client (tenant) that iDocuments needs to send emails through.

A mailbox administrator account needs to create a new application.

Under the Applications menu, add a new “Enterprise application”
- Call it something useful, (e.g., iDocuments SMTP)
  - Under “Properties”, ensure it is enabled for sign-in
- Back under the Applications menu, go to “App registrations”
  - Select the application configured in the above step and choose “Branding & properties”
    - Ensure the “Publisher domain” matches the domain in which the sending account is held
- Under “Authentication”
  - Add a web redirect URL to the page in iDocuments where the authorisation process is managed
    - This will match the settings page, so one of the following is dependent on your iDocuments login:
      - https://production.idocuments.io/emailmessagesetup.aspx
      - https://productionuk.idocuments.io/emailmessagesetup.aspx
  - Ensure the supported account type is just the domain for the sending address (single tenant)
- Under “Certificates & secrets”
  - Add a new “Client Secret” with an expiry of your choice (Note: the 'Value' is required, but not the secret ID)
- Under “API permissions”
  - Add a new permission of type “Graph” using “Delegated permissions” for “Mail.Send” and “User.Read”
After the configuration is complete, you will need:
- Directory (tenant) ID
- Application (client) ID
- Client Secret 'Value'
- Email address to send via