Skip to main content
To homepage To homepage
SUBMITTED

Email notifications using MFA accounts

  • December 6, 2023
  • 3 replies
  • 41 views
R
Starter

Hey, in the documentation on executions/jobs I found the following information on setting up emails as notifications for succeeded and failed executions:

  1. Enter the information for the SMTP server you want to use under Mail Server.
    • Since October 1st, 2022 Microsoft has ended basic authentication on email on online SMTP servers. To deal with this you need to add an Application (client) id for an app to use for this and the Tenant ID for your company. The app you use needs the following permissions.

       

      • You need the three options, (Mail.Send, SMTP.Send and User.Read) set on your app

      • You need a Admin to grant consent for the three settings.

      • The user account you add as the From Email and the User name needs to run without Multi-factor Authentication.

    • If you use GMail to authenticate, it is not possible to use email and an std password. Here you need to turn on 2-step authentication for your email account and then use the App Password in the password field.

My question:

We have a policy that MFA is required for every account, and we do not want to make an exception for this.
“The user account you add as the From Email and the User name needs to run without Multi-factor Authentication.”

Are there any plans to support for example a client secret setup, to authenticate with the App registration using a client secret? For now this means we cannot use email notifcations, which prevents us from monitoring our TX environment.

 

Kind regards,

Rutger

3 replies

erik.van.mastrigt
TimeXtender Xpert
Forum|alt.badge.img+3

Hi Rutger,

It may sound odd, but just to be pragmatic: you can set up a Gmail account and create an App Password as mentioned in the article.

In that case you avoid violating the internal security policies, and still can use the notification features until there is a better solution available.

Best,

Erik

Christian Hauggaard
Community Manager
Forum|alt.badge.img+5

@RutgerNijland Currently a non-MFA account is required, unless using a Gmail account as Erik mentions above. I have converted this post to a product idea 

S
Contributor
  • spenning
  • Contributor
  • March 12, 2024

Is this situation still the same? We also have a tenant wide policy with MFA. Creating a seperate gmail account does not seem as a very clean solution. Is there a simple way to monitor a job via a powershell script, and send notification to Teams or another platform which can receive api messages? Otherwise, I think the best other possibility would be to monitor the jobs via the Timextender API, but this would bring unneccessary complexion for just a notification. 

Terms and ConditionsAccessibility statement