Configuring the Settings for Using OAuth 2.0 Authentication for Linked Folder E-mail Transmission

When selecting [OAuth 2.0] in the e-mail settings authentication for Linked Folder, the administrator must configure the following settings.

Configuring the Microsoft Exchange Online Administrator Settings

  • This operation is performed by the administrator of Microsoft Exchange Online.
  • Global administrator privileges are required to allow access.

Enabling SMTP AUTH for the Microsoft 365 User

  1. Log in to the Microsoft 365 admin center with an account for Microsoft Exchange Online.
    https://admin.cloud.microsoft/
  2. Click [Users] > [Active users].
  3. Select to the user to use for the source e-mail address.
  4. On the displayed screen, click [Mail].
  5. In the [Email apps] section, select [Manage email apps].
  6. Confirm that the check box for the [Authenticated SMTP] setting is selected.
  7. Click [Save changes].

    • If you select the [Authenticated SMTP] check box when it is deselected, it may take some time until e-mail can be sent.

Registering the App

  1. Log in to the Microsoft Entra management center with an account for Microsoft Exchange Online.
    https://entra.microsoft.com/

    • Application creation permissions are required.
  2. Click [Applications] > [App registrations].
  3. Click [New registration].
  4. Enter a name of your choice.

    • The application name used here is not used in FUJIFILM IWpro. Register a name that is easy for the Microsoft Exchange Online administrator to identify.
  5. In the supported account types, select [Accounts in this organizational directory only ({organization name} only - Single tenant)].
  6. Select [Web] in the platform selection of the direct URL, and enter the following value.
    http://localhost
  7. Click [Register].

Registering Authentication

  1. Log in to the Microsoft Entra management center with an account for Microsoft Exchange Online.
  2. Select the registered app, then click [Authentication] in the menu on the left.
  3. Select [Access tokens (used for implicit flows)] and [ID tokens (used for implicit and hybrid flows)], and click [Save].
  4. Click [Certificates & secrets] in the menu on the left.
  5. Click [New client secret].
  6. Enter the description and expiration date in [Description] and [Expires], then click [Add].
  7. Make a note of the string in [Value] in [Client secrets].

  • [Client secrets] contains the [Value] and [Secret ID] settings. The string in [Value] is used.
  • [Value] cannot be displayed for the created client secret after the [Certificates & secrets] screen is reloaded. If you did not make a note of the string in [Value], create a new client secret.
  • By default, a client secret expires after six months. You can extend this to a period of up to two years.
  • A link error will occur once the client secret expires. If an error occurs, follow the procedure in Updating a Microsoft Entra Client Secret.

Allowing Access

  1. Log in to the Microsoft Entra management center with an account for Microsoft Exchange Online.
  2. Click [Applications] > [App registrations] in the menu on the left.
  3. Select the registered app, then click [API permissions] in the menu on the left.
  4. Click [Add a permission].
  5. Click [Microsoft Graph].
  6. Click [Delegated permissions].
  7. Select the following check box, then click [Add permissions].
    • [SMTP.Send]
    • [offline_access]
  8. Click [Grant admin consent for {account name}], then click [Yes].

Confirming the Setting Values

  1. Log in to the Microsoft Entra management center with an account for Microsoft Exchange Online.
  2. Select the registered app, then click [Overview] in the menu on the left.
  3. Make a note of the values displayed in [Application (client) ID] and [Directory (tenant) ID].

This completes the administrator settings.

FUJIFILM IWpro Linked Folder is configured by a general user. Share the following values that were confirmed in Registering Authentication and Confirming the Setting Values with the general user, as they are required for configuration.

  • Client secret
  • Application (client) ID
  • Directory (tenant) ID