Microsoft Exchange/Office 365 protocols

 

Since Microsoft's implementation of the OAuth2 authentication protocol and the end of the OAuth protocol in October 2022, users who wish to use Office 365's SMTP or IMAP protocols for sending and receiving email in PRIM will need to set up these protocols in PRIM, after completing the application registration and required configurations in the Azure Active Directory account.  These procedures are described below.

 

 

Registration and configuration in Azure Active directory

 

 

1.Log to Microsoft Office 365 portal and click on Azure Active Directory.

2.Select Azure Active Directory (1) > App registrations (2) > New registration (3).

3.Enter a complete name for your application. Users of the app will see the complete name when they use it.

4.Specify who can use the application, sometimes referred to as sign-in audience.

5.Do not enter anything for the Redirect URI (optional). The redirection URI will be configured in the next step.

 

Once registration has been completed, the Azure portal displays the global overview pane of the application registration. The Application (client) ID is displayed. Also called client ID, this value uniquely identifies your application in Microsoft identity platform.

 

 

 

1.In the Azure portal, choose the API permissions pane in the management view of your Azure AD application.

2.Select Add a permission.

3.Select the tab APIs my organization uses.

4.Search for "Office 365 Exchange Online".

5.Click on Application permissions.

6.For IMAP access, choose IMAP.AccessAsApp. (For POP, choose POP.AccessAsApp.)

7.Once you have chosen the permission type, select Add permissions.

8.Once done with the above, go back to Add a permission (2) and select the following:

9.Once you have selected the permission type, click on Add permissions.

10. Grand administrator consent.

 

You now have set up the application permissions for POP or IMAP, that have been added to the permissions in you AAD application.

 

 

 

 

1.In Azure portal, choose the Authentication pane in the management view of your Azure AD application.

2.Select Add a platform, then Mobile and desktop applications.

3.Tick the 3 checkboxes and click on Configure.

4.Select Add URI.

5.Add the 2 following URLs: « http://127.0.0.1:3016 » and « http://127.0.0.1:3017 » and Save.

 

Do not use "http://localhost:3016", since the localhost can be blocked by the firewall or antivirus. Note that these 2 ports must be open in the firewall.

 

 

 

Configuration in PRIM

 

The procedure below is to create the protocols in PRIM. These protocols should be applied to user profiles for sending and receiving emails in PRIM for SMTP, IMAP or POP, including the system user "Dispatcher".

 

1.Launch PRIM with proper permissions.

2.Go to System > Settings.

3.Open the tab Export transfer protocols.

4.Use the Insert button.

5.Choose a short and meaningful name: we suggest the name of the protocol ending with 365. Then, select the protocol type XOAUTH2.  

6.Enter the values obtained at step 3 of set up in Azure in proper les valeurs obtenues à l'étape 3 de la configuration dans Azure dans les colonnes appropriées, tel qu'indiqué ci-dessous, et sauvegardez.

a.Authorization endpoint and Token endpoint: AAD admin center > Azure active directory > App registrations > Endpoints

b.Client application id: AAD admin center > Enterprise applications > PrimLogix

c.Listen port: 3016 ou 3017 – Ideally, assign a port for each protocol.

d.Local host: 127.0.0.1

e.Scope:

IMAP: openid profile offline_access https://outlook.office365.com/IMAP.AccessAsUser.All

SMTP: https://outlook.office.com/SMTP.Send offline_access

7.Repeat this operation for each desired protocol.

The protocols are ready to use in user profiles for synchronization setup.