On the Identity Console home page, click Email Server Configuration.
On the Email Server Options page, specify the values for your email notification server.
Host Name: Specify the hostname or IP address of your SMTP server along with the port number. Use colon (:) to separate the hostname or IP address and port.
For example, smtp.example.com:587
From: Specify the sender's email address. The email server performs reverse lookups or authentication using this value.
Time Out Value: The timeout option allows you to set the time limit (in seconds) to send notification emails.
Enable SSL: Select to enable SSL, if required.
(Conditional) If your server requires basic authentication before sending emails, select Authentication Required as Basic Authentication and provide your username and password.
Although the authentication information is specified here, you might also need to specify it separately for the application that is sending the notification e-mails.
For example, Forgotten Password e-mail notifications can be sent by using the authentication information you specify here. However, notification e-mails for Identity Manager Password Synchronization require the authentication information to be provided in the driver policy that is used to send notification e-mails.
(Conditional) If your server requires modern authentication before sending email, select Authentication Required as Modern Authentication and provide values for the following parameters:
NOTE:You must register the Identity Console application with Azure AD to get the values for these parameters. For more information about how to register your application, see Azure AD portal for registering applications.
User Id: Specifies the account required for server authentication.
Tenant Id: Specifies the Global Unique Identifier (GUID) for your registered account on Azure Active Directory. Also referred to as the Tenant (Directory) ID.
Client Id: Specifies the unique ID assigned by Azure Active Directory to your Identity Manager. Also referred to as the Application (client) ID.
Client Secret Specifies a secret string that Identity Manager uses to prove its identity when requesting an access token. This encrypted value is unique for your application.
Scope: Specify the scope of the server.
Request Url: Specifies the request URI of your email server, to which Identity Manager sends authentication requests containing the client secret, scope, grant type, and auth mechanism in the payload.
For example, https://login.microsoftonline.com/<tenantID>/oauth2/v2.0/token
Grant type: Used by Identity Console to obtain an access token to access their own resources, not on behalf of a user. The Grant Type parameter is set to client_credentials by default and cannot be modified.
Auth mechanism: Specifies the format used by the application to encode and transmit the access token to the authentication server. The access token authenticates a user's Outlook account. By default, Auth Mechanism is set to XOAUTH2 and cannot be modified.
Click Save.