Overview

OAuth authentication required for Office 365 for new tenants is supported by PhixFlow. This page describes the setup required.

System Configuration Setup in PhixFlow

In
1. Check the following
   1. Ensure that the System Configuration → System URL field is set to the
URL for your application in the System URL field
2. 1. public URL PhixFlow is accessed on by users.
      1. For example
.
3. 1. 1. , http://
localhost
4. 1. 1. phixflowhost.com:8080/phixflow/
If SAML is already configured then this next step should already be configured.In phixflow-login.xml in sameSiteCookieFilter check that JSESSIONID is set to None. It is the line marked as <!-- The following line must be uncommented to allow SAML login →
5. 2. Ensure the secure flag is set on cookies, see Install Tomcat

Host's Application Configuration

1. Configure the application in Azure, Google Developer or similar
   1. https://learn.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth
   2. https://learn.microsoft.com/en-us/power-platform/admin/connect-gmail-oauth2
2. Configuration parameters
3. The application type is Web.
4. The redirect URL is yourPhixFlowInstance/receiveTokenAuthentication.htm
   1. e.g. For example, http://localhost:8080/phixflow/receiveTokenAuthentication.htm

Client Token Configuration in PhixFlow

1. In PhixFlow create a Client Token Configuration from the Full Repository.
2. To allow a user to authenticate choose the User flow
3. Set the Client ID to the value obtained from Azure/Google
4. Client Secret to the value obtained from Azure/Google
5. Google
   1. Auth URL https://accounts.google.com/o/oauth2/v2/auth?prompt=&access_type=offline
      1. For tokens to auto renew set access_type=offline as a parameter in the URL
   2. Token URL https://oauth2.googleapis.com/token
   3. Scopes https://mail.google.com/

   4. 
      

      Warning
      Google only sends a refresh token on the first authentication so if you don’t get a refresh token you have to delete the connection from

google

6. 1. Google and authenticate again

. This is also a problem if you want to use the same email address for an inbound and outbound email

7. 1. .

      
      

8. Microsoft
   1. Base URL https://login.microsoftonline.com/common/ or https://login.microsoftonline.com/{tenantId}
   2. Scopes, recommended setup:

      1. 
         

         Code Block
         https://outlook.office.com/SMTP.Send

or

9. 1. 1. https://outlook.office.com/POP.AccessAsUser.All

or

10. 1. 1. https://outlook.office.com/IMAP.AccessAsUser.

All offline

11. 1. 1. All  offline_access openid

email

12. 1. 1. email

          
          

Create an Email Account in PhixFlow

1. Create an Email Account in the Full Repository.
2. Set Enabled
3. Set Type to Inbound or Outbound depending on your requirements.
4. Set Authorisation Type to OAuth2
5. Select your client token configuration.
6. Click Authenticate Email Account to perform the authentication process which provides access to your Google/Microsoft account.
   1. Image ModifiedPOP, IMAP, and SMTP settings for Outlook.com - Microsoft Support
   2. For POP Outlook add to the properties mail.pop3s.auth.xoauth2.two.line.authentication.format=true
7. Image Removed

1. 1. Image Added