How do I start using the new Microsoft 365 OAuth 2.0 authentication in SuperOffice CRM?  

If you’re a user of SuperOffice CRM Online or SuperOffice CRM Onsite version 10.1.2 or higher (and hotfix 8.5 R17), you can use the modern authentication (OAuth 2.0) method to connect to your Microsoft 365 account in the SuperOffice Inbox.  For SuperOffice CRM Onsite 10.1.2 or higher, you can also connect your Microsoft 365 account to an IMAP mailbox in SuperOffice Service. In SuperOffice CRM Online, the Service module uses our integrated mail service.   

Note! It is possible to use this feature as well if you’re a user of SuperOffice CRM Onsite (from version 9.2 R10 to 10.1.2). For more information, please contact your SuperOffice contact.    

 

Click here to learn how to create a mailbox in SuperOffice Service with OAuth 2.0 for SuperOffice CRM Onsite.  

Click here to learn how to connect to the SuperOffice Inbox with OAuth 2.0.  

Click here when you experience the problem that your Microsoft account is not recognized as a Microsoft 365 account.   

  

Creating a mailbox in SuperOffice Service Onsite with OAuth 2.0  

  

1. Navigate to Settings and Maintenance, then click on Requests - E-mail, and then on New mailbox.
   
   
    
2. A pop-up will appear. Fill in the email address of your Office 365 mailbox. If SuperOffice recognizes the UPN as a Microsoft 365 email account, we redirect you to Microsoft for authentication.
    
3. When the authentication is completed, you can fill in the Mailbox details. 

More information:

Email in Service and Marketing

Set up mailboxes in Service   

 
Note! During the setup of a mailbox in Service, you may be presented with an Invalid client_id error as below:  

  

This is due to a security mechanism that only allows one registration per serial number. Get in touch with SuperOffice support and provide the serial number of the installation you have a problem with.   

 If you see a red-marked error as below, please delete the cookies in your browser and try again. If that does not help, please check if the Firewall is blocking IMAPS on port 993. 

  

   

Connect to the SuperOffice Inbox with OAuth 2.0  

      

1. To access the e-mail options, click the Personal settings button and click E-mail options.  
   
   
    
2. Click on the E-mail account tab and then on the Edit/remove button. If you were logged in to the SuperOffice Inbox already, you should remove your account before you can make the OAuth 2.0 connection.   
   
   
    
3. When there is no account configured in the SuperOffice Inbox, fill in your Microsoft 365 'User Principal Name' (UPN) in the field E-mail account and click Next.
   
   
    
4. If SuperOffice recognizes the UPN as a Microsoft 365 email account, you will be redirected to Microsoft for authentication. Authenticate your Microsoft account and complete the login.   
   
   
    
5. You will then be taken back to the SuperOffice Inbox. Your email account is now set up to use OAuth 2.0 authentication.  

  

  

My UPN is not recognized as a Microsoft 365 email account, but I am using Microsoft 365  

  

There are 2 known causes of this problem.

One possible cause is that the internal DNS is not pointing the MX Record of the domain to Microsoft. The solution is to make sure the internal DNS is pointing the MX Record of the domain to Microsoft.  

Please follow the steps below to check if the setup is correct via the command prompt from your local network. You may need help from your IT administrator to perform this.    
  

1. Open the command prompt.  

2. Type "nslookup", then press Enter. You will see the following: Default Server: <FQDN of your server> ...  

3. Type "set type=mx", then press Enter.  

4. Type the domain’s name that you want to look up, then press Enter. The MX records of that domain will appear.  

 

If the MX does not point to Microsoft, as in the picture above, this is the cause of the problem. Contact your IT administrator to resolve this DNS issue.   

The other known cause is that the NetServer of your Onsite SuperOffice CRM installation is configured to use EasyMail instead of MailKit. This can be adjusted in the web.config. file in the Web Installation on the server. 

 

    <Mail>
      <Component>
        <add key="Reader" value="EasyMail" />
        <add key="Sender" value="EasyMail" />
      </Component>
    </Mail>

This has to be switched to:

    <Mail>
      <Component>
        <add key="Reader" value="MailKit" />
        <add key="Sender" value="MailKit" />
      </Component>
    </Mail>