Setting up Microsoft Exchange Email for finPOWER Connect in Cost Centres
Email integration within finPOWER Connect has been updated.
- Firstly, due to changes to Microsoft Exchange Basic Authentication. For more information see https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online.
- Secondly, to align email integration with SMS in the New Messaging Interface.
The new Microsoft Exchange email integration within finPOWER Connect Cost Centres requires the following:
- Set up a Microsoft 365 Application Registration
- Assign permissions
- Sending on Behalf Of
- Configure Cost Centres
- Verify the configuration
These instructions are correct at the time of writing.
It is recommended that changes to Entra ID and Microsoft Exchange be performed by a qualified person.
Set up an Entra ID Application Registration
The Microsoft identity platform performs identity and access management (IAM) only for registered applications. Whether it's a client application like a web or mobile application, or it's a web API that backs a client application, registering it establishes a trust relationship between your application and the identity provider, the Microsoft identity platform.
Prerequisites
This article assumes that you already have a Microsoft 365 Exchange Online tenant set up and working.
Get Tenant ID
To configure finPOWER Connect you will first need to find your Tenant ID. Follow these steps:
Go to the Azure administration portal https://portal.azure.com.
Under Azure services, choose Microsoft Entra ID.
On the Overview tab, take note of the Tenant ID.
That information is required to configure finPOWER Connect.
Create App Registration
Go to App registrations and click on New registration.
On the Register an application page: Give the application a name, e.g. finPOWER Connect Email.
For Supported account types, choose the Single Tenant option, i.e. Accounts in this organizational directory only (your-tenant-name - Single tenant).
For Redirect URI, choose Public client/native (mobile & desktop) for the platform, and use the URI: https://localhostfinPOWER/Temporary_Listen_Addresses/.
Click the Register button.
Get the Client ID
Back in the list of App registrations - which you might have to refresh first - you should see your new App registration and its Application (Client) ID.
Click on All applications and locate the Application (Client) ID for your App Registration.
Take note of the Client ID. It is required for configuring finPOWER Connect later.
Create a Secret Key
Under Application, click Add a certificate or secret.
Under Client secrets, click New client secret.
Enter in the details of the secret.
Take note of the Value. It is required for configuring finPOWER Connect later and will not be available to copy later!
Assign Permissions
Click on the App registration you just created to open it.
Click on API Permissions, then click Add a permission.
Click on Microsoft Graph.
Click On Application permissions.
Search for and select:
- Mail.ReadWrite
- Mail.Send
- MailboxFolder.ReadWrite.All
Click Add permissions.
Then click Grant admin consent for [your-tenant-name].
Authenticated SMTP Permission
The Authenticated SMTP permission must be granted to all users using their own within finPOWER Connect.
Log in to your Microsoft 365 administration portal https://admin.microsoft.com and select the list of Active users in the Users section.
In the list of active users, click on a user name. A side panel will pop up. Click on Mail then Manage email apps.
Ensure Authenticated SMTP is checked
Save the changes, and repeat this process for ALL users.
Sending on Behalf Of
Users can be given permission to send on behalf of another user, group, distribution list.
Navigate to https://admin.exchange.microsoft.com/.
Choose whether you want to set up a Mailbox or a Group.
For a Mailbox click on the individual item. In the panel, click on Delegation. You can then edit the Send as and Send on behalf of lists.
For a Group click on the individual item. In the panel, click on Settings, and then Edit manage delegates. You can then edit the Send as and Send on behalf of settings.
You can then search by name or email address and set the options:
- Send as
- Send on behalf
Configure Cost Centres
You will now have set up Microsoft Exchange for use in finPOWER Connect, and you will have the following information from the steps above:
- Tenant ID
- Client ID
- Secret
Verify the Configuration
Once the Cost Centre has been set up, the configuration can be tested by clicking the main Verify button, and also the Verify button for each User Override that has been configured. You can choose who to send the Verification email to and should check that this email has in fact been received.
If Exchange and the Cost Centre is correctly configured, a verification report is generated.
