We have have added the option to send email notifications via your M365 mail. When chosen, additional configuration is required.

• Set the ‘From address’ to the email address emails will be received from. This MUST be an existing email account you have set up in your tenant.
  The From address used in the Service Definition will be ignored, please remove this if it is in place.
  
• An Entra app registration is required with the additional ‘Mail.Send’ permission added and linked to ProvisionPoint via AAD App. (If you have an existing ProvisionPoint API app registration this can be used).
  
  • A Global admin may be required to grant admin consent to this permissions 
    
  • Link the app to ProvisionPoint via Admin > Settings > AAD App.
    • A certificate MUST be created here and uploaded to the app registration 
      
• An access policy to allow send on behalf of permissions (this will need to be completed by an exchange admin or global admin)
  This is not always required, try without, but setup if the notifications do not work
  
  • We recommend setting up an Role based access control for applications in Exchange Online 
    

    Import-Module ExchangeOnlineManagement
    Connect-ExchangeOnline -UserPrincipalName <add an exchange or global admin account>
    $PP-AppId="insert the Application ID of the ProvisionPoint Enterprise app"
    $PP-ObjectId="insert the Object ID of the ProvisionPoint Enterprise app"
    New-ServicePrincipal -AppId $PP-AppId -ObjectId $PP-ObjectId -DisplayName "M365-Notification-Provider"
    New-ManagementRoleAssignment -App $PP-ObjectId -Role "Application Mail.Send"
    Test-ServicePrincipalAuthorization

1. Brevo | Email Marketing Software, Automation & CRM
2. Twilio Email API and Email Marketing Campaigns | Send Grid

Generate an API Key 

1. Login to he send in blue web page, using your account - below shows an example from Brevo (Send in Blue)
   
   1. Select your profile > Settings > SMTP & API
   2. Select API keys & MCP
      
   3. Click 'Generate API Key' 
   4. Give the Key a name & Expiry date
      
   5. Click Generate
   6. Your Key will be displayed, copy this and keep it safe.
      
2. Open ProvisionPoint and navigate to the Admin > Settings > App Settings > Notification Settings tab
   
   1. Select the notification provider from the list
   2. Set Use own instance to Yes
   3. Set provider details to Yes
   4. Paste in the API key
      
   5. Click Save

Setup Senders and IPs

1. Login to the 3rd party website
2. Access your profile > Settings and click 'Senders, domains, IPs'
3. Authenticate your domain
   1. Add the Domain name
   2. Click Continue
      
   3. Add a branded subdomain
      
   4. Choose how to add the records:
      
4. Once Authenticated, add Senders, these are the email addresses you would like to use in ProvisionPoint
   
   1. Click 'Add Sender'
      
   2. Add the name and email address of the sender
      
   3. Click Add Sender
   4. A verification will be sent
5. Repeat for any other send from addresses.

Amend the From Address in all Service Definitions

Now the senders and domain is configured, amend the Service Definitions > Notification > From Address field with your verified email:

 

 

 

If you do find the emails are still getting blocked, please check you have no other DNS blocks or applications that may prevent the emails being sent.

In some cases a sub domain can be created to resolve blocks.