What is Microsoft Graph
Microsoft Graph is a unified RESTful API endpoint that acts as a gateway to access data and services across Microsoft 365, including Outlook, OneDrive, SharePoint, Teams, and more. It allows developers to interact with Microsoft 365 services in a consistent, modern way. This makes it possible to send emails directly via Microsoft Graph, bypassing SMTP entirely.
Prerequisites Requirements
Before it can be used to send emails, a few prerequisites are required.
- Access to create a Microsoft Entra Application for your organisation
- Claromentis version 10.4.4, 9.11.7 or above
Step 1: Creating a Microsoft Entra Application
On this next step, we will be creating a new Microsoft Entra Application so the Microsoft Graph can connect to the application.
1. Go to https://entra.microsoft.com/
2 Sign in using the Microsoft Azure / Entra / Office 365 that has permission to create Entra application
3. Go to Applications and click New Registration
4. Complete the form
Name: {mysystem.myintranet.com} Graph Email
Supported account types: Select appropriate types for your organisation
Leave the URL redirect empty
5. Take a copy of the following IDS
- Application (client) ID
- Object ID
- Directory (tenant) ID
6. In Claromentis, Navigate To Claromentis Admin > System > Mail
Click the Mail Driver dropdown, and you should see a new option
Paste the value into the matching fields
Step 2: Creating Client Secret
1. In Microsoft Entra, click Add a certificate or secret
2. Create a new client secret
Description: {mysystem.myintranet.com} Client Secret
Expires: Decided how long the client secret is valid for, remember you may need to renew this after its expired.
3. In Claromentis, Navigate To Claromentis Admin > System > Mail > Microsoft Graph
Paste the value to the Client's secret
Step 3: Add Microsoft Graph Permission
We now need to add the "Mail.send" permission to allow Microsoft Graph to use this API.
1. Click API permissions > Add a permission:
2. Select Microsoft Graph
3. Add the Mail.Send permission:
4. Go back to API permissions
5. Click "Grant admin consent for {YourCompany}"
This grants the application consent to use the newly added permission
Step 4: User Principal Name (as sender)
This step is finding the user's Principal Name, which is usually in the email format, to act as a verified email sender
1. Go to the Users page, find the user you wish to act as the sender, and copy the User Principal Name:
2. Copy the value into Claromentis
Navigate To Claromentis Admin > System > Mail > Microsoft Graph
3. Update the Claromentis System Email
Navigate to Admin > System > General
Step 5: Testing & Troubleshooting
1. Testing Connection
Navigate to Claromentis Admin > System > Mail > Microsoft Graph
Click on "Test Connection" - You should see a growl notification confirming a successful connection:
Error: Connection test failed
Possible causes
- Incorrect client secret
- Expired client secret
2. Testing Email Delivery
Navigate to Admin > Labs
Test by sending an email notification to a user
