Third-party email services from Google (Google Email) and Microsoft (Microsoft Azure) require that access to their mail servers is granted by a protocol named OAuth2. This is a token-based mechanism, and ExtraView supports this with automated as opposed to manual access. Given both incoming and outgoing email notifications with ExtraView are automated tasks, the complete process of authentication is handled by the ExtraView administration utility named Access Tokens for 3rd Party Email Services. This utility allows the administrator to reach out to the email servers and receive a token that provides access. When the token expires, ExtraView refreshes the token automatically, to ensure continuation of access without manual sign ons to the email servers.
Before configuring the feature, please make sure your Apache Tomcat application server configuration file has the appropriate mount points for the OAuth2 connection. These will be similar to these entries with your instance's <instance name> and <tomcat service name>:
JkMount /<instance name>/OAuth2 <tomcat service name>
JkMount /<instance name>/OAuth2/* <tomcat service name>
Familiarity with the Micosoft Azure and Google Email applications is assumed. The following pages document the key steps for both Microsoft Azure and Google Email configurations. Following these is the instruction page to configure the token access within Extraview.
This is a summary of the steps:
When configuring Batchmail and EVMail, there is an appendix to this guide at OAuth2 Email Mailbox Settings to assist.
Hint: You need to interchange information between ExtraView and the Email service you are configuring. Open two browser windows, one with ExtraView and one with the Email portal so you can easily copy & paste information between them. This simplifies copying the ExtraView URI address to the email service, and the service information such as the client secret and token ID into ExtraView.
ExtraView supports the use of multiple email addresses for different purposes. The key email addresses are each set as behavior settings that may have the same or different values:
In addition, individual user's email addresses may be used (explicitly or as the * Current User *) as outgoing email addresses. These each require authentication when used with Microsoft Azure or Google Email. Additional configuration of the external email services can be made to support multiple addresses.
For example, within Microsoft Azure you may permit the user configured within Batchmail to be a delegated sender for all the other email addresses that you want to use as email FROM addresses. Alternatively, change the ExtraView configuration to set the REPLY_TO email header to the individual users, rather than the FROM header.
