Since OTRS 2025.9 release, OAuth2 authentication support is available for SMTP.
There will be an important upcoming change regarding email sending through Outlook 365.
See also
Microsoft has announced the planned shutdown of basic authentication for client submission (SMTP AUTH). Originally scheduled for September 2025, this change has now been postponed to March 1, 2026. Further details can be found in Microsoft’s announcement.
To ensure uninterrupted email sending, we recommend planning your transition well in advance of Microsoft’s cutoff date to avoid any disruption.
To configure the email sending:
-
Go to the Credentials screen.
-
Create a credential of type OAuth2::Authorization Code Flow.
-
Set Scope as
offline_access https://outlook.office.com/SMTP.Send
-
-
Go to the System Configuration screen.
-
Search for the setting
SendmailModuleand set it toKernel::System::Email::SMTPTLS. -
Search for the setting
SendmailModule::Credentialand add the name of the credential created in step #2. -
Search for the setting
SendmailModule::AuthUserand add the authentication user. -
Search for the setting
SendmailModule::Hostand addsmtp.office365.com.
Needed permissions in Microsoft Azure:
-
Application permissions
-
- Microsoft Graph
-
-
offline_access-> delegated -
SMTP.send-> delegated
-
-
- Office 365 Exchange Online
-
-
SMTP.SendAsApp
-
-
-
User (mailbox) account permissions
-
Authenticated SMTP
-
