Sending emails using Exchange Online with OAuth

Requirements

• Exact Globe+ or Exact Compact+ 500SP7 or 501SP1 from 15 December 2022 or newer.
• Exact Globe Next or Exact Compact 422SP14, 423SP7, or 424SP1 from 9 December 2022 or newer.
• Exact Synergy Enterprise 267SP14, 500SP7 or 501SP1 from 15 December 2022 or newer.
  
• Exact Lightweight Integration Server (ELIS) for product update 267SP14, 500SP7 or 501SP1 from 5 December 2022 or newer.

Creating application ID in Microsoft Azure for Microsoft Exchange Online

You need an application ID for use with Exact Exchange Migration Tool and solutions to access data in Microsoft Exchange Online. Ensure the following steps are completed before connecting the Exact solutions to the Microsoft Exchange Online application:

1. Create an application ID in Microsoft Azure from App registrations.
2. Configure authentication for your App.
3. Configure security requirements.
4. Configure API permissions for your App.
5. Obtain the application ID and directory IDs to be used in the related Exact solutions.

Create an application ID in Microsoft Azure from App registrations

1. Go to https://portal.azure.com.
2. In the Azure services section, click Azure Active Directory.
3. On the left panel, click App registrations.
4. Click + New registration.
5. On the Register an application page, define a name for the application and click Register. The application and directory IDs will be shown in the next page in the Essentials section.

Configure authentication for your App

1. On the left panel, click Authentication in the Manage section after the above steps have been completed.
2. Under the Web section, click Add URI.
3. Specify the address at the available field.
4. In the Implicit grant section, select the Access tokens check box.
5. In the Advanced settings section, make sure the Default client type option is set to Yes.
6. Click Save.
7. Next, click Add a platform in the Platform configurations section. The Configure platforms panel will be displayed.
8. Click Mobile and desktop applications.
9. Fill in the URI address at Custom redirect URIs field.
10. Click Configure then click Save at the top of the page.

Configure security requirements

1. On the left panel, click Certificates & secrets.
2. Click + New client secret.
3. Define the description, select the expiry period, and click Add.
   Note: When the client secret expires, you must create a new client secret and enter the new value in your Exact product.
4. The Client secret is displayed in the Value column.
   Note: It is important to note down the client secret at this point because it is only visible after creating it. The client secret will not be displayed again.

Configure API permissions for your App

1. On the left panel, click API permissions.
2. Click + Add a permission.
3. Click the Microsoft APIs tab, then click Microsoft Graph.
4. Click Delegated permissions and enable the following:
   • OpenId permissions > email, offline_access, openid, and profile.
5. Click Application permissions and enable the following:
   • AccessReview > AccessReview.Read.All
   • Mail > Mail.Send
6. Click Add permissions after each of the two steps above.
7. Next, click + Add a permission again.
8. Click the APIs my organization uses tab.
9. Click Delegated permissions and search for office 365 exchange in the filter field. Select Office 365 Exchange Online and enable the following:
   • EWS > WES.AccessAsUser.All
10. Click Application permissions and enable the following:
    • Other permissions > full_access_as_app
11. Click Add permissions after each of the two steps above.
12. If the Status column for the respective API or permission name is blank or it displays “Not granted for the Domain name”, click Grant admin consent for [Domain name].
13. You will see the “Grant admin consent confirmation.” message.
14. Click Yes. The status will be updated to “Granted”.

Obtain the application ID and directory IDs to be used in the related Exact solutions

1. The Tenant ID is displayed at Directory (tenant) ID, and the Client ID is displayed at Application (client) ID under the Essentials section.

Define settings in Exact Globe+, Exact Globe Next, Exact Compact+, and Exact Compact

1. Go to System > General > User settings.
2. Click the Output tab.
3. Select Exchange Online in the E-mail section.
4. At Account under the Sender section, define the e-mail address that will be used for the sender.
5. At Client ID, enter the Client ID from the Azure portal.
6. At Tenant ID, enter the Tenant ID from the Azure portal.
7. At Client Secret, enter the Client secret from the Azure portal.
8. Click Save.

Define settings in Exact Synergy Enterprise

1. Go to Modules > HRM > Setup > General > Settings.
2. Click Edit.
3. In the Server section at E-mail , select Exchange Online.
4. At Tenant ID, enter the Tenant ID from the Azure portal.
5. At Client ID, enter the Client ID from the Azure portal.
6. At Client Secret, enter the Client secret from the Azure portal.
7. At Sender account (email), define the e-mail address that will be used for the sender.
8. Click Save.

Define settings in Exact Lightweight Integration Server (ELIS)

1. Open Exact Lightweight Integration Server Management (ELIS) Console.
2. Select Settings on the left panel.
3. Select Exchange Online at Server.
4. Type the tenant ID at Tenant ID.
5. Type the application (client) ID at Client ID.
6. Type the client secret at Client secret.
7. Type the sender account email at Sender account.
8. Click Save.