VMA - Microsoft 365 Setup

Virtual Mail Assistant - Microsoft 365 Setup

Since Microsoft will begin/began deactivating basic authentication (Basic Auth) for Exchange Online on October 1, 2022, some changes will also be necessary in VMA (Virtual Mail Assistant) with regard to its use in connection with Microsoft 365.

New law "VMA Login" required

Logging in to VMA now requires the "VMA Login" right. This right must also be assigned to the user who is logged in to the c-entron agent is registered.

Configuration for Microsoft 365

• Disable Microsoft security settings

IMAP requires delegated authorization. However, MFA must be disabled for the user in question. This is not possible with the standard security settings, as these enforce MFA for all users.

• Register application
  

  

• Default selection for a client
  

  

• Add permissions
  

  

• Required permissions
  

  

  
  
  Microsoft Graph – Delegated permissions
  IMAP.AccessAsUser.All
  offline_access

• Grant administrator approval for permissions
  

• Set up client key
  

  

  
  The key must be copied and saved for insertion into the VMA. Once you leave the Azure page, the key can no longer be viewed and must be recreated.
  
  

  

• Set up VMA
  

  

  
  
  - Select Microsoft 365 IMAP
  - Username and password for the mailbox that the VMA should access

• - TenantId is the tenant ID of Azure

  

• ClientId is the application ID of the Azure app created earlier
  

  

  
  

• Client secret is the client key created earlier
  namely this one: (however, it can no longer be read at this point and may need to be recreated if you have not noted it down previously)
  

  

• Please note that the user registered in c-entron requires the "VMA Login" right.