((OTRS)) Community Edition - Setting up OAuth2 authentication for Microsoft 365 mailbox

foreign [Music] you will learn how to set up the oauth 2 authentication for your Microsoft 365 email service to use it with otrs Community Edition first we will set up a shared mailbox that otrsce will use to get email you can skip this part if you already have a mailbox to use with otrs CE in your web browser go to The Exchange admin Center at admin.exchange.microsoft.com in the sidebar select mailboxes on the manage mailboxes screen click add a shared mailbox in the form that appears enter a name for your mailbox and set the email address by entering the local part and selecting a domain then click create you now need to select the users that will be allowed to read and manage this mailbox select the newly created mailbox in the list and go to delegation click the edit button in the read and manage section click add members select the users that you want to add and click save click confirm we will now register an app in Microsoft 365. the app will allow otrs CE to authenticate with Microsoft 365 and access the contents in the mailbox go to the Microsoft Azure portal at portal.azure.com go to the app registration screen you can find it using the search bar at the top foreign click new registration in the form enter a name for the application select the public client native option in the redirect URI platform drop down click register a summary of your new app will be displayed use the icon next to the application ID to copy its value because it will be needed later in the next step we will configure authentication for the newly created app foreign bar select Authentication then click add a platform select the web platform in the configure web form enter the redirect URI that is used by otrsce usually your domain name followed by slash otrs slash get Dash oauth 2 Dash token Dash by Dash authorization Dash code.pl click configure now we will configure a client's secret for the application select certificates and secrets in the sidebar click new client Secret in the add a client secret form choose when the secret will expire you can also add the optional description click add in the summary copy the value of the secret using the icon next to it because it will also be needed in a later step make sure you save it because it is only displayed immediately after the secret is created and will disappear later we will now configure the permissions required to access the mailbox after a successful Authentication select API permissions in the sidebar then click add a permission select Microsoft graph then select delegated permissions use the search box to find and select the appropriate permissions in the displayed list enter IMAP thank you SMTP pop foreign when all required permissions are selected click add permissions a summary will be displayed with a list of selected permissions you can remove the default user.red permission as it isn't needed in this case finally click Grant admin consent with the Microsoft 365 application configured we will now configure a mail account in otrs CE to use it for authentication open otrsce and go to the admin screen in the communications and notifications section choose oauth 2. in the sidebar select a Microsoft Outlook token configuration template and click add configuration foreign for the configuration and paste the two values copied in the earlier steps the application or client ID and the value of the client's Secret click save on the previous oauth2 token configuration screen click request to new token to get the first authentication token you may need to log into your Microsoft 365 account to confirm the request make sure to use an account that has allowed access to the mailbox when the oauth 2 token configuration screen is refreshed you should see that both the authentication token and the refresh token are now listed as valid go back to the main admin screen and select postmaster mail accounts click add mail account in the Account Details form select the type of the account usually imaps or IMAP TLS and choose oauth 2 token as the authentication method in the username field enter the email address of the mailbox select the newly created oauth 2 configuration in the host field enter the name of the IMAP server if you're not sure what hostname to use you should be able to find it at your exchange account click save configuration is now complete and your otrs CE system should be able to authenticate with Microsoft 365 and receive messages sent to the configured mailbox foreign

Channel: Centuran Consulting

Views: 10,987

Keywords:

Id: I-ngN8Ep9VM

Length: 8min 31sec (511 seconds)

Published: Fri Oct 28 2022