Registering Outlook & 365 Email Accounts with Open Authorisation

Registering Outlook & 365 Email Accounts with Open Authorisation

What is OAuth and why is it required ?

Microsoft has recently taken the decision to implement OAuth2 as the standard authentication process for online email applications. 
The traditional method of SMTP authentication, requiring a username and password in most cases, is still valid, however recently created accounts may need to verify using OAuth.
Info
OAuth, which stands for 'Open Authorization', is a standard designed to allow a website or application to access resources hosted by other web apps on behalf of a user.
OAuth 2.0 allows users to share specific data with an application while keeping their usernames, passwords private and therefore being a more secure method than SMTP.
The following guide gives a step-by-step instruction on how to create and apply the required information to authenticate via OAuth.


Azure Portal

Within the Settings of PH Cloud under General Settings > Company Profile > Email Settings, there is now a button to configure OAuth for Microsoft email accounts.




Click on the blue button and browse to the Azure portal website, using the link as shown below.



The Azure portal requires the Email username and password to access the site




Account Registration


Azure Active Directory > App Registrations > New Registration

When you have access to the homepage of the azure portal you need to open up the Microsoft Entra ID App (previously Azure Active Directory App)

On the left-hand Manage menu, select 'App Registrations' and then 'New Registration' (located on the top menu)

Set up the account registration as follows -

Display Name > Personal Account > Redirect URI > WEB
(Depending on how you manage your emails, select Accounts in this organisational directory for a single email domain (eg roeville.com)  or Organizational Directory for Multitenant, EG Exchange server)
The URI can be copied from the PH Cloud software browser. (https://phcloud.roeville.com/oauth/o365)



Once completed, you will be presented with three ID keys, similar to below
Make a copy of the (Application) Client ID and the (Directory) Tenant ID and add them into the corresponding fields in PH Cloud



Once added, select the Client Credentials option, as shown


Click on the  '+ New Client Secret' button

Enter a description and maximum length of expiry from the drop-down list

Select the Blue 'ADD' button from the bottom of the page and you will then be presented with another ID Key

Make a copy of the Value ID (NOT the Secret ID) and add this to the PH Cloud template.

Warning
The Client Secret ID cannot be viewed again once you log out of the Azure portal, therefore make an external copy first.
If you no longer have a copy of the client secret, this will need to be processed again, repeating the above steps for adding a client secret

PH Cloud Configuration

Once the Tenant ID, Client ID & Client Secret are added, select the Link to Email Provider button to complete the registration process, as shown below.




When successfully registered, the email settings in PH Cloud will now be displayed as follows



You can revert to the SMTP email method by selecting the orange 'Remove Microsoft 365' button

If you have any other questions about the above, please do not hesitate to contact our support team, who will be happy to help.

Opening Hours
Mon-Thu - 0900 - 1730
Friday       - 0900 - 1700
T: 01302 841333




    • Related Articles

    • Setting up SMTP for Outlook

      This article provides step-by-step instructions for setting up Outlook for t3, PHCloud, Ph28, and t28. Depending on if your emails are managed by an external IT support company, you may need your IT to carry out these steps. Step 1: Log into the 365 ...

    • How to add attachments and create an email template

      This article assists with personalising your emailed documentation and how to include any additional attachments, that may be required to support the document. Adding an attachment Located via the settings menu, browse to the following section. ...

    • Accounts link

      t3 offers integration with various external accounting systems, allowing you to post Cash Daybook batches into the Nominal Ledger of systems that support file import. This article explains the process of using the Accounts Link feature to facilitate ...

    • Updating the email password in t3

      If t3 suddenly stops sending confirmations via email then the most likely cause of this will be that the password for the email account that t3 uses has been changed and t3 will need to be updated with the new password. Updating the password in t3 ...

    • Setting up SMTP for Gmail

      This article provides step-by-step instructions for setting up Gmail for t3, PHCloud, Ph28, and t28 Due to Google's security requirements, 2FA is required for Gmail setup. This adds an extra layer of security to your Google account by sending ...