windowsSetting up Oauth SMTP Entra

Creating an Entra application


Register an Entra application

triangle-exclamation
  • Enter an application name

  • On GLPI, retrieve the GLPI redirection URL available in Configuration > Notifications > Configuration of email notifications. In Way of sending emails, select SMTP+OAUTH.

Viewing the callback URL
  • You will see the redirection URL in the new menu that appears. Copy the callback URL

Copy of URI
  • Then in URI redirection, select web on EntraID Portal

  • Paste the Callback URL retrieved before

  • Click on Save.


Creating the secret

  • Now, on your new App registered go to certificate and secrets.

  • Click on new client secret.

  • Enter a name and an expiry date.

  • Then click on add

Duration of secret
  • Once validated, the secret value appears.

circle-info

Point of attention

The value of the secret must be reflected in client secret on the GLPI side. This value is only visible once, remember to save it in a safe place.


Adding claims

The addition of claims is necessary so that GLPI can use the SMTP service via the Entra application.

  • Go to API Permissions

  • In the Claims tab, click on your application (in this case Microsoft graph).

Verifying claims via API permissions
  • On the right-hand side of the screen, search for SMTP.

  • select it then click on Update permissions.

Adding claims

Last GLPI settings

  • Return to the application's Overview menu to find the information you need to enter into GLPI.

  • We filled in the secret value in the previous step, all that remains is to fill in the Application ID and the directory ID.

Entra application information
GLPI configuration
  • When you click on Save, you will be redirected to the Microsoft account to be connected.

circle-exclamation

Authenticated SMTP configuration

In order for the account using SMTP services to be authorised to send mail, it is imperative to activate authenticated SMTP from the Entra Tenant.

  • Connect to your tenantarrow-up-right

  • Go to Users > Active users and click on the relevant account

  • Then go to Mail > Manage mail applications and select SMTP Authenticated

Authenticated SMTP enabled
Authenticated SMTP enabled

Send test

  • Once you have entered your Microsoft account details, you will need to accept the necessary authorisations. All that's left is to carry out a test send.

Test email sent successfully

References

GLPI documentation "Email followups configuration"arrow-up-right

Last updated