Set up Microsoft Exchange Online

Configure Microsoft Exchange Online when you want MyQ to send email through Exchange Online using OAuth authentication.

After completing this procedure, continue with Set up Exchange Online in MyQ.

Important!

MyQ X sends email using SMTP with OAuth. SMTP AUTH must be enabled in Exchange Online for the tenant or mailbox used as the sender. If SMTP AUTH is disabled, MyQ cannot send email through Exchange Online.

Prerequisites

you can register applications in Microsoft Entra ID
you can add Microsoft Graph API permissions
SMTP AUTH is enabled for the Exchange Online tenant or sender mailbox
you know which mailbox will be used as the sender address in MyQ

The mailbox user must complete Microsoft device-code authorization after the connection is added in MyQ.

Register the Application in Microsoft Entra ID

Sign in to the Microsoft Entra admin center.
Go to Identity > Applications > App registrations.
Select New registration.
In Name, enter a name for the application.

Example: MyQ X Connector, MyQ Universal Print, MyQ Sharepoint
In Supported account types, select the account type required for your deployment.
Leave Redirect URI empty.

You add the required redirect URIs later in this procedure.
Select Register.

The application is created.

In the Overview page of the application registration, copy and save the values:

Application (client) ID
Directory (tenant) ID

You enter these values when configuring the connection in MyQ.

Configure Authentication

Configure the application as a public client.

No client secret is required.

In the application registration, go to Manage > Authentication.
Select Add a platform.
Select Mobile and desktop applications.
Select the following redirect URI:

https://login.microsoftonline.com/common/oauth2/nativeclient
Select Configure.
In Advanced settings, enable Allow public client flows.
Save the changes.

API Permissions

Add the permissions required by MyQ.

Go to Manage > API permissions.
Select Add a permission.
Select Microsoft Graph.
Add the permissions/scopes according to the tables below.

Permissions

Permission	API	Type	Purpose
`User.Read`	Microsoft Graph	Delegated	Sign in and read the mailbox user's profile.
`IMAP.AccessAsUser.All`	Microsoft Graph	Delegated	Read, update, create, and delete email in the user's mailbox. This permission does not include sending mail.
`SMTP.Send`	Microsoft Graph	Delegated	Send email from the user's mailbox.

Authentication Scope

Integration	Scope	Scope ID	Purpose
Microsoft Exchange Online	`offline_access`	—	Allow MyQ to renew access without requiring the mailbox user to authenticate every time.

Now you are ready to set up Exchange Online in MyQ. See Connect to Microsoft Exchange Online