I’m trying to setup our mail services for Kinetic and I figured I would ask here before asking our conversion team since they will recommend a consultant I’m guessing… But I’ve followed these instructions https://erphelp121100.zendesk.com/hc/en-us/articles/40443603738509-Entering-Mail-Settings#Entering3
for Entering Microsoft 365 Settings and I can’t get it to work. I do a test and I get this error.
I was assuming the permissions that I granted in step 18 would have allowed this API to “Send mail as any user” as it states, but does that only mean any actual user? Not including fake email accounts? I don’t want to setup an account for this, I just need it to send alerts and that’s it.
Under Email Settings Maintenance…need to specify Azure Directory ID, Azure Application ID, Application Secret. We created a separate account for ours, I think we gave it an Office E1 license. We have Use Common Authority URL box checked. Ours also has a checkbox for “use individual’s email From field (requires the right to send on behalf of sending account)” and ours in unchecked.
Well, Google may have answered the question… Microsoft’s setup isn’t very clear that send from “any user” means they need to actually exist…
To send an email from a non-existing email address (like noreply@yourdomain.com) using Microsoft Entra, you generally cannot use the standard Microsoft Graph API alone because it requires a sender to have a licensed Exchange Online mailbox. [1, 2]
The standard workaround is to create a Shared Mailbox, which is free and does not require a license, to serve as your non-existing sender address. Alternatively, for high-volume or truly “addressless” sending, you should use Azure Communication Services
I have all of that filled out and the error I’m getting is when I’m trying to test send from Kinetic.
What they leave out in the Kinetic setup guide is the sending user ID has to exist somewhere, as a licensed user or a shared mailbox. It can’t be 100% fake.
Yeah, you’ll need to use a real mailbox. Either a service account or a shared mailbox where you setup Send on Behalf for the user account you authenticate with.
There may be some way to get away with not using a mailbox but I’ve never bothered figuring that out.
I also don’t use M365 for Kinetic email. We use a SMTP relay service so that I can send bulk and send as any address. We send from multiple addresses in Kinetic.
In some respects it comes in handy…I’ve got delegate access to that mailbox so if someone questions whether or not something got sent, I can forward/resend if need be.
That is an interesting approach to have a sent items archive of all notifications… I don’t see that as being an issue right now since we barely use alerts at this time.
But, confirmed… setup a shared mailbox and it works.
It appears that even with a shared mailbox if you setup the O365 app and use that from address it will drop the sent email in the sent items of that mailbox. I’ve done one test to myself and I can see that sent item in the shared mailbox… Interesting.
Just be aware there are send limits on MS accounts unless you use the bulk emailer. We have managed to err get blocked a few times by accidently spamming ourselves
Oh I’m not worried about that… we have like 2 global alerts setup right now and its only for one specific customers orders… I doubt we’ll have any problems.
