SMTP configuration for Platform notifications

[ankitsynx]

Hello Community,

I have been struggling for a while setting  up the SMTP for the platform available in advanced setting. The Mailbox that is want to use is on O365 and the default one is Google's own mailbox. 

This mailbox works perfectly fine with the exchange integration, I am able to send email as well as ingest them as cases. 

But while configuring it in the platform settings I do not have an option to provide client secret in the Oauth setting. Only client ID and tenant ID parameters are available. Due to this the setup just does not work. The error message complains of Client secret missing in request. 

Please suggest if anyone has been able to set it up successfully.

Error message when I click on Test button:
 A configuration issue is preventing authentication - check the error message from the server for details. You can modify the configuration in the application registration portal. See https://aka.ms/msal-net-invalid-client for details. Original exception: wadcfkwqeiuchqiru: The request body must contain the following parameter: 'client_assertion' or 'client_secret'. Trace ID: abcdwejhciuwvro Correlation ID: asdjbfabvieonrnvper Timestamp: 2024-08-20 09:36:10Z

[f3rz]

Hi @ankitsynx, could you please try to use client secret in the password field? 

[ankitsynx]

@f3rzTried that and got a green check mark on test button, still not getting emails. But can see the notification on console.

[f3rz]

I would recommend you to review the logs in Azure Exchange / Office365 end to see if there's anything unexpected happens. Because SecOps SOAR doesn't monitor state of email once request was sent successfully. 

You may use this for tracing email within Azure: https://learn.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-modern-ea...

[skadav]

Hello,

You need to add below highlighted permissions for your application at Azure side:
1. Navigate to Manage > Advanced Settings and set Allow public client flows to Yes.

2. Make sure the following permissions are granted on the API Permission tab:
           IMAP.AccessAsUser.All
           SMTP.Send

For details, refer Set up your email  |  Google Security Operations  |  Google Cloud

Regards,
Suraj Kadav