Configure Email Credentials
Set up email credentials using the E-mail Credentials Manager in CSM Administrator.
CSM uses server-side authentication to manage email primarily through the Automation Process service and the Email and Event Monitor. Office 365 and G Suite do not offer account restrictions for this flow, but CSM keeps credential-based email accounts secure through encrypted access tokens stored on CSM servers. In addition, email credentials can only be created and modified in CSM Administrator by a user with the Can administer e-mail credentials security right. For Office 365, you must grant the Azure App full access to Exchange Web Services (EWS). See Daemon app that calls web APIs - app registration. For G Suite, you must enable domain-wide delegation. See Control G Suite API access with domain-wide delegation.
- When defining the default From settings for an email account, ensure messages are sent from the server, rather than the client machine. Ensure the Allow arbitrary FROM addresses check box is cleared.
- When defining email security rights, ensure the Can specify arbitrary FROM addresses even if not allowed for Users? security right is disabled.
To set up email credentials: