Integration of Microsoft 365 mail services into ioi

Introduction #

This tutorial details how to configure the integration between Microsoft 365 (Outlook) mail services and the Frappe mail system.

Authentication is managed via the OAuth 2.0 standard.

Prerequisites #

1. Frappe Version: Ensure that your Frappe instance is updated to at least version 15 (preferably the latest version).
2. Access to HTTPS Site: You must have access to a Silicon ioi site using the HTTPS protocol.
3. Microsoft 365 Global Admin Account: A Microsoft 365 account with global administrator privileges is required.

Compatibility #

This methodology was tested and validated with Frappe version 15 as of August 30, 2024.

Step-by-step guide #

Follow the steps detailed on the Frappe forum via this link or refer to the instructions.

→ Also consider the additional configuration points described in the section Additional Configurations.

Azure Admin Portal #

In Azure AD, create an App Registration and configure permissions, secrets, etc.

Application Registration #

1. Access the Azure Admin portal:

1. App registrations.

1. Create a new registration.

1. Permissions.

SMTP Standard Mode: Add permissions to the application.

Mode MS Graph :

1. Enter the Client ID of the application in Silicon ioi.

1. Create your authentication keys (secrets).

1. Obtain the OpenID configuration endpoint, which will be needed in subsequent steps.

In Silicon ioi #

1. Create a connected application.
2. Copy the OpenID configuration value obtained earlier (.7) and use the Fetch OpenID Configuration button to get the endpoint URLs. Then, fill in the Client ID (.5) and secret value (.6).

1. Connected App Scopes.

SMTP / IMPA Mode: Add the following scopes:

• https://outlook.office365.com/.default
• offline_access

MS Graph Mode: Add the following scopes:

• https://graph.microsoft.com/.default
• offline_access

4.Redirect URI

1. Use the redirect URI value (.4) and return to the M365 app registration to add this URL under authentication.

1. Connecting the Application in Silicon ioi:

→ In the new Connected app, click Connect to XXXX.

1. Create an email account and assign it to the “end user.”

Set up the account with the following information:

SMTP-IMAP Mode:

Create a mail domain and then configure the email account.

Email Account Configuration

(SMTP – IMAP Mode)

(MS Graph Mode)

Account creation using only this information.

 

MS Graph Mode :

MS Graph mode has been integrated into Frappe’s standard email module, supporting both sending and receiving emails.

For receiving emails, both the “ALL” and “UNSEEN” modes are supported:

ALL → Imports all emails (up to the Initial Sync Count).

A new entry is created for each account in the doctype ioi Email Pull Request with the last synchronization date (last received email date).

UNSEEN → Imports only unread emails, marking them as read once imported. If an email is marked unread again, it will be re-imported.

Each received email generates a document in the “Communication” doctype.

Additional Configurations #

Adding an Authorized API: SMTP.SendAsApp #

1. Access Azure Active Directory.
2. Add a new authorization.
3. Select APIs used by my organization.
4. Search for “Office 365 Exchange Online”.
5. Select Application Permission.
6. Choose the SMTP.SendAsApp permission.

Disabling “Turn off AUTH SMTP Protocol” #

→ In Microsoft 365 : https://admin.exchange.microsoft.com/#/settings

→ In Frappe :

Error 500: Repeating Redirects Detected Outlook Online Microsoft 365 #

If you encounter a 500 error when connecting to https://outlook.office365.com via your browser :

Or follow these steps:

1. Access Azure Active Directory.
2. Select the administrator user of your application.
3. Keep only the “Global Administrator” role.
4. Refresh the page https://outlook.office365.com.

Multi-Address Setup #

You can link multiple email addresses to a single user.

However, only one Microsoft 365 connection instance is allowed per user session.

Attachments #

Attachments are supported for both sending and receiving emails.

For received emails, it is possible to set a maximum acceptable attachment size.