---
sourceDocument: Xanadu ServiceNow AI Platform Administration
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/platform-administration

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu ServiceNow AI Platform Administration

ft:clusterId :

    - platadm

bundleId :

    - platadm

workflow :

    - Platform


---

# Configure client credential flow for SMTP OAuth2 using a client id and secret

# Configure client credential flow for SMTP OAuth2 using a client id and secret {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Configure outbound email accounts in a ServiceNow instance using a client id and secret.

## Before you begin

Create an [Microsoft Azure](https://portal.azure.com) account to configure an OAuth profile.

Complete the setup steps using your Microsoft Azure Developer account. See [Microsoft Azure product documentation](https://docs.microsoft.com/en-us/azure/) for instructions on creating and configuring custom applications.

Role required: Microsoft Azure portal administrator and admin

## Procedure

1. Log in to the Microsoft Azure registration portal with your organization credentials.  
   For more information, see the Microsoft Azure [registration portal documentation](https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade).
2. Register a new custom application by filling in the application name, supported account type, and redirect URL, and select Register.  
   Note:  
   Enter the redirect URL in the following format: <kbd class="ph userinput">https://&lt;instance&gt;/oauth_redirect.do</kbd>.  
   An overview of the application's basic information is displayed.
3. Copy the client ID to a text file.  
   You'll use this client ID and the client secret value generated in the next steps to register the app as a third-party OAuth provider on your ServiceNow instance. You use the application ID as the client ID when you connect the application to your instance.
4. Enable the SMTP.SendAsApp permission.
   1. In Microsoft Entra ID, navigate to API permissions, and select Add a permission.
   2. Select Application Permissions.
   3. From the list of permissions, select SMTP.SendAsApp.
   4. Select Add permissions.
   {#configure-client-id-secret-email-auth__substeps_ddd_zft_whb}
5. Select Grant admin consent for \<your organization name\>, then select Yes to confirm.
6. Add a client secret.
   1. In Microsoft Azure, navigate to ManageCertificates \& secrets.
   2. Select New client secret.
   3. Provide a description and an expiration date, then select Add.
   {#configure-client-id-secret-email-auth__substeps_dzd_nct_whb}
7. Copy the value (secret value) to a text file.
8. Register service principals in Microsoft Exchange using PowerShell.
   1. Run the following commands.  

          Install-Module -Name ExchangeOnlineManagement -allowprerelease
          Import-module ExchangeOnlineManagement
          Connect-ExchangeOnline -Organization <tenantId>

      For more information, see [Authenticate SMTP connection using OAuth](https://learn.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth)
   2. Register an Microsoft Azure AD application's service principal by running the following command.  

          New-ServicePrincipal -AppId <APPLICATION_ID> -ObjectId <OBJECT_ID>

      Important:  
      When registering the service principal, copy the Object ID from Microsoft Entra IDEnterprise applications for the registered application, and use that value in the PowerShell command.
   3. Add permission to user email ID using the following command.  

          Add-MailboxPermission -Identity "<email_id>" -User <object_id> -AccessRights FullAccess 

   {#configure-client-id-secret-email-auth__substeps_k1j_bvd_nzb}
9. Navigate to OverviewEndpoints and copy the OAuth 2.0 token endpoint (v2) to a text file.  
   You use the OAuth 2.0 token endpoint (v2) when registering an OAuth provider. For more information, see [Register an OAuth Provider](https://servicenow-prod.fluidtopics.net/iFPTlWEjtLvjtZ091xg2Rw "Use the information generated during the Microsoft Azure account configuration to register an application as an OAuth provider.").
{#configure-client-id-secret-email-auth__steps_bbj_tfz_ztb}

## What to do next

[Register an OAuth Provider](https://servicenow-prod.fluidtopics.net/iFPTlWEjtLvjtZ091xg2Rw "Use the information generated during the Microsoft Azure account configuration to register an application as an OAuth provider.")

*[\>]: and then