Microsoft Modern Authentication in Merit Aktiva
If you have chosen „Exchange Modern Auth“ as your option for sending out e-mails from Merit Aktiva, you will see boxes that have to be filled with application information, created and provided by e-mail service provider:
To create suitable application, you need to enter Office365 portal with admin user, go to „Admin“->“Show all“->“all admin centers“->“Microsoft Entra“
After entering MS Entra you will find first ID we need to use in Merit Aktiva e-mail settings, „Directory (tenant) ID“:
Next we need to create application that we will use to send out e-mails, we create rights for this application and secrets:
As you probably create application just for one domain, you should use „Single Tenant“ option:
After application is created, you have got next value for Merit Aktiva, „Client/Application ID“ (number 1), Number 2 shows the place you can create value for a field „Password“ ja number 3 shows the place for creating rights for your application.
API rights:
Click API Permission -> Microsoft Graph -> Delegated Permission -> User.Read.
Click API Permission -> Microsoft Graph -> Application Permission -
> Mail.Send.
Click API Permission -> Add a permission -> APIs in my organization uses -
> Office 365 Exchange Online -> Application Permission -
> Other permission -> full_access_as_app
If an admin user used for setting up application is not current domain user, you cannot find „Office 365 Exchange Online“ in the list of rights and you have to add this manually.
Also we have to „Grant admin consent“ as 2 of our permissions need it:
Secret(s) can be created as shown above and you need to copy Value field to Merit Aktiva. You can create individual secret for every user that needs it, or just one for everyone. Sender will be the one, named on the Merit Aktiva field: „Exchange user“
After this is done, your „Exchange Modern Auth“ option should work.
Possible error messages:
If you have incorrect „Application ID“: „(400) Bad Request“
If you have incorrect „Tenant ID“: „is not avalid for TenantId“
Server name is incorrect: „(400) bad Request“
Wrong „secret“: „(401) Unauthorized“
Wrong „Exchange username“: „(500) Internal Server Error“