SMTP oAuth Setup

This article specifies the steps to set up the SMTP OAuth in NetForum. This article will also cover all required information that needs to be set up in newly created system options.

This procedure applies to the NetForum Fall 2025 Release 37 version and later. 

Prerequisites

• Need to have an Azure account with valid subscription to create App Registration.
• Must be an Admin of Exchange Online.

Procedure

Step 1. Register the add-in with Microsoft identity platform

1. Sign into the Azure portal with the admin credentials.

2. Select the App registrations icon on the Azure portal. If you do not see the App registrations icon, search for "app registration" using the Search bar.

3. Select the New registration link.

4. On the Register an application page, set the values as follows:

• Set Name to <add-in-name>.
• Set Supported account types to Accounts in any organizational directory (any Azure AD directory - multitenant) and personal Microsoft accounts (e.g., Skype, Xbox).

5. Select the Register button.

• Copy and save the values for the Application (client) ID and the Directory (tenant) ID. You will need these values for later procedures.

 

6. From the Overview page of your app registration, under the Manage link and then select API permissions.

•  
  • Select Add a permission.
  • Select the APIs my organization uses tab and search for "Office 365 Exchange Online".
  • Click Application permissions.
  • For POP access, choose the POP.AccessAsApp permission. For IMAP access, choose the IMAP.AccessAsApp permission. For SMTP access, choose the SMTP.SendAsApp permission. The following screenshot shows the permissions selected:

• After selecting the required permission type, select the Add permissions button.
• Select Grant admin consent for [tenant name].
• Confirm by selecting Yes in the pop-up that appears.

Step 2. Register service principals in Exchange

• Please follow Register service principals in Exchange section of below link to register your Entra application's service principal in Exchange via Exchange Online PowerShell. https://learn.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth#register-your-application

Step 3: NetForum Configuration Changes to Enable SMTP oAuth

• The following System Options must be updated to enable SMTP oAuth in NetForum:
  • SmtpoAuthEnabled:  true
  • SmtpAzureClientId: Azure application’s Client ID
  • SmtpAzureClientSecret: The secret key used with the Client ID to securely authenticate the app with Azure AD.
  • SmtpAzureTenantId: Azure AD Tenant ID
• Other System Options that must set are, SMTPServer, SMTPPort, and EmailNotifyFrom.

Note: All email IDs used for sending must be registered using the commands mentioned in Step 2; otherwise, you will not be able to send emails.