SMTP Settings

The SMTP settings page allows you to configure an outgoing mail server for use with Send an email deployment steps.

Note

SMTP settings are only accessible to users with the System Administrator role.

Accessing SMTP settings

Navigate to Configuration → SMTP to configure the mail server.

Configuration

fDeploy supports two authentication modes for outgoing mail: Basic (username and password) and OAuth2 (for Microsoft 365 via Azure/Entra ID).

Connection settings

Setting	Description	Default
Host	The SMTP server address (e.g. smtp.office365.com)	—
Port	The port number for the SMTP server	587
SSL/TLS	Enable secure connection to the SMTP server	Enabled
From Address	The sender email address (e.g. [email protected])	—
From Name	The display name shown as the sender	fDeploy

Host and From Address are required. If they are not configured, any deployment step that attempts to send an email will fail.

Basic authentication

Select Basic as the authentication mode, then provide:

Setting	Description
Username	SMTP authentication username
Password	SMTP authentication password

This works with most SMTP providers (e.g. Google Workspace, Amazon SES, or any provider that supports username/password authentication).

OAuth2 authentication (Microsoft 365)

Select OAuth2 as the authentication mode to authenticate using Azure/Entra ID client credentials. This is required for Microsoft 365 mailboxes when basic authentication is disabled.

Setting	Description
Username	The mailbox email address that the app is authorized to send as
Tenant ID	Azure Entra ID Directory (tenant) ID
Client ID	Application (client) ID from the Entra ID app registration
Client Secret	Client secret created in the Entra ID app registration

fDeploy requests an OAuth2 access token from Microsoft at send time and authenticates with the SMTP server using the XOAUTH2 mechanism.

Caution

Client secrets expire. Track the expiration date of your secret in Azure and rotate it before it expires, or email steps will fail.

Setting up OAuth2 with Microsoft Entra ID

To use OAuth2 SMTP with Microsoft 365, you need to register an application in Azure and grant it permission to send mail.

1. Register an application

1. Go to the Azure Portal → Microsoft Entra ID → App registrations
2. Click New registration
3. Name: fDeploy Email (or any name you prefer)
4. Supported account types: Accounts in this organizational directory only
5. Click Register

2. Grant API permissions

1. In the app registration, go to API permissions
2. Click Add a permission → Microsoft Graph → Application permissions
3. Search for Mail.Send and select it
4. Click Add permissions
5. Click Grant admin consent for [your tenant] (requires admin privileges)

3. Create a client secret

1. Go to Certificates & secrets → New client secret
2. Enter a description (e.g. fDeploy SMTP) and choose an expiry period
3. Click Add
4. Copy the Value immediately — it is only shown once

4. Gather the required values

Value	Where to find it
Tenant ID	Entra ID → Overview → Tenant ID
Client ID	App registration → Overview → Application (client) ID
Client Secret	From step 3 above

5. Configure fDeploy

Navigate to Configuration → SMTP and enter:

Setting	Value
Host	smtp.office365.com
Port	587
SSL/TLS	Enabled
Auth Mode	OAuth2
Username	Your mailbox email address (e.g. [email protected])
Tenant ID	Your Azure tenant ID
Client ID	The application (client) ID
Client Secret	The client secret value
From Address	Same as or matching the mailbox address

Testing SMTP

After configuring SMTP, click Save & Send Test Email to verify your settings. Enter a recipient email address and fDeploy will queue a test email. You will be redirected to the task details page where you can monitor the result.

Tip

If the test email fails, check the task log for the error message. Common issues include incorrect credentials, firewall rules blocking outgoing SMTP traffic, or missing API permissions in Azure.