This article describes how to configure sending ISPnext emails through your own Microsoft 365 Outlook account. For this, an application is created in Microsoft Entra (previously Azure AD), after which ISPnext is configured to use that application.
This configuration needs to be done in conjunction with your internal IT department. ISPnext cannot assist with filling in these fields or figuring out which values are needed.
Create an application in Microsoft Entra
To allow ISPnext to send emails using a user or service account, a Microsoft Entra application with the appropriate permissions is required.
Create a new app registration
- Go to the Microsoft 365 Admin Center (https://admin.microsoft.com/) and navigate to Identity (Microsoft Entra) > App registrations > New registration.
- Fill in the fields:
- Name: Any name.
- Type: Accounts in this organizational directory only (Single tenant)
- Redirect URI: Not required.
- Click Register.
Set up the application permissions
From the details page of the application, navigate to:
- API permissions > Add a permission
- Microsoft Graph > Application permissions > Mail.Send, and click Add permissions.
- If the status column reads "Not granted for ...", click the button above the table to grant admin consent.
The configured permissions should look like this:
Create a client secret and collect the IDs
The Tenant ID, the Client ID and a secret are required in ISPnext. The secret must be created first.
- From the application details, go to Certificates & secrets > New client secret.
- Copy the secret value and store it in a safe location.
The secret value can only be copied once. After leaving the page it can no longer be viewed, and a new secret must be created.
Next, copy the Application (client) ID and the Tenant ID of the application. Both can be found on the details page of the application.
Configure ISPnext
- In ISPnext, go to Admin > General Settings > tab: Mail Settings.
- Choose Microsoft 365 as the external mail type.
- Fill in the required fields:
- Tenant ID
- Application Client ID
- Application Secret - The secret is saved after filling it in, but cannot be read back, for security reasons.
- 'From' address - The email address from which emails are sent.
- Use the Send test email button to test the settings.
- When the test is successful, contact ISPnext Support via a ticket to turn on the Microsoft 365 Enabled checkbox.
In case the secret is no longer valid, fill in the new secret in the Application Secret field to update the configuration.
Below the settings shown in the picture, the read-only field ISPnext e-mailadres is also displayed. This is a different address: it is a fixed ISPnext mailbox for inbound mail, NOT for outgoing mail. This field does not need to be set, as this is done by ISPnext.