Overview

Starting with version 26.1 email sending is supported via Microsoft Graph by introducing the Mail.Send permission in the Service Connections configuration. This enhancement enables applications to send emails over Microsoft Graph using HTTPS instead of relying on SMTP.

This change addresses environments where SMTP cannot be used due to network restrictions, blocked outbound SMTP traffic, mandatory proxy usage, or security policies that disable traditional SMTP authentication. It offers an alternative to the dependency on direct SMTP connectivity, providing a secure and modern solution for sending email in restricted or security-conscious infrastructures.

 

Prerequisites

  • Enterprise Service Management Platform v.26.1 or higher
  • Microsoft Azure account with granted permissions for Applications Registration
  • An active and available mailbox that is the same as the one registered for your Microsoft Azure Account

Configuration

Configuration steps:

  1. New Service Connection using Microsoft Entra ID Service with Graph API capabilities;
  2. Emails settings in ESMP Administration area.

Service Connection

Log in to the Administration area of the Enterprise Service Management Platform, proceed to Integration navigation Item → Service Connections → choose Connections.

  1. To start configuration, click Add Service Connection action
  2. Fill out the required fields
  3. In the Service field, select Microsoft Entra ID Graph API object, which is available by default in the system:

    The name for your Service Connection is auto-generated, but you can modify it if necessary.
  4. In the Tenant field, proceed with creating a new tenant. Fill out the name.
  5. In the Service field choose Microsoft Entra ID with OAuth Authentication Type
  6. For Client ID, Tenant ID, and Client Secret, login to  Microsoft Azure Portal. You can use the same example of the Mcrosoft Azure Portal configuration, as described in Email settings: Microsoft Exchange Server and Service Connections
  7. To finalize the Service Connection configuration, in the Administration area, click Setup Authentication.
  8. When Service Connection Authentication has been successfully fulfilled, click Save & Close.

E-mail Settings

To finalize the emailing configuration, in Administration area, open SettingsEdit Global System Settings.

In the Emails view:

  • Enabled: select the checkbox to enable emailing
  • Enable SMTP Authentication
  • Select Modern Authentication (OAuth 2.0) property
    • Mailbox Email Address: enter an email address of an active and available mailbox that was used for Service Connection creation and authentication.
    • Service Connection: choose a previously created Service Connection.
    • SMTP Server Connection Type: dropdown is available for the Service Connections based on Microsoft Entra ID. For Service Connection based on Microsoft Entra ID Graph API capabilities, select Microsoft Graph option.

Click Save & Close to finalize the configuration and save changes.

Now your Enterprise Service Management Platform emailing is working.