Changes in Authentication Requirements for Microsoft Exchange

Microsoft has announced that Basic Authentication for SMTP in Exchange Online will be disabled starting September 2025.

If you have set up email delivery in your BOC Management Instance to use Exchange Online, you must migrate to the OAuth2 client credentials flow to authenticate your BOC product instance with Microsoft Entra.

Configure email integration in your BOC product

To configure email integration in your BOC product (ADONIS 16.3 (LTS), ADONIS 17.0, ADOGRC 13.2, ADOIT 17.3, and later versions), please contact your Azure Admins to receive the following required information:

• Name of the mail server: <IP address or name of your mail server> (e.g. smtp.office365.com)
• Port of the mail server: <Port of your mail server> (e.g. 587)
• System sender address: <email address which should be used as sender address for system notifications>
• Encryption: StartTLS (required)
   
• Username: <username for the email account>
• Client ID: <the ID of your azure application>
• Secret: <secret of your azure application>
• Entra Token Endpoint URL: https://login.microsoftonline.com/<Tenant-ID>/oauth2/v2.0/token
• Scope:  https://outlook.office365.com/.default

Once the information has been provided by your Azure Admins, please enter it in the email service settings of your BOC Product (ADONIS, ADOIT or ADOGRC). 
 

Note: Please keep in mind that a restart of the BOC Product environment is required when mail settings are changed in your BOC Product.

Check if permissions have been set

Please also check with your Entra Admin if the application that was created has the following permissions set:

• Check if the "SMTP.SendAsApp" permission was added
• Check if the app was registered as a service principal in Exchange Online

• Check if the service principal has access to the mailbox

  For instructions see the official Microsoft documentation