Overview

OAuth authentication required for Office 365 for new tenants is supported by PhixFlow from Version 10.1 onwards. This page describes the setup required.

System Configuration Setup in PhixFlow

1. Check the following
   1. Ensure that the System Configuration → System URL field is set to the public URL PhixFlow is accessed on by users.
      1. For example, http://phixflowhost.com:8080/phixflow/
   2. Ensure the secure flag is set on cookies, see Install Tomcat

Host's Application Configuration

1. Configure the application in Azure, Google Developer or similar
   1. https://learn.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth
   2. https://learn.microsoft.com/en-us/power-platform/admin/connect-gmail-oauth2
2. Configuration parameters
3. The application type is Web.
4. The redirect URL is yourPhixFlowInstance/receiveTokenAuthentication.htm
   1. For example, http://localhost:8080/phixflow/receiveTokenAuthentication.htm

Client Token Configuration in PhixFlow

1. In PhixFlow create a Client Token Configuration from the Full Repository.
2. To allow a user to authenticate choose the User flow
3. Set the Client ID to the value obtained from Azure/Google
4. Client Secret to the value obtained from Azure/Google
5. Google
   1. Auth URL https://accounts.google.com/o/oauth2/v2/auth?prompt=&access_type=offline
      1. For tokens to auto renew set access_type=offline as a parameter in the URL
   2. Token URL https://oauth2.googleapis.com/token
   3. Scopes https://mail.google.com/

   4. Google only sends a refresh token on the first authentication so if you don’t get a refresh token you have to delete the connection from Google and authenticate again.

6. Microsoft
   1. Base URL https://login.microsoftonline.com/common/ or https://login.microsoftonline.com/{tenantId}
   2. Scopes, recommended setup:

      1. https://outlook.office.com/SMTP.Send https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/IMAP.AccessAsUser.All 
         offline_access openid email

Create an Email Account in PhixFlow

1. Create an Email Account in the Full Repository.
2. Set Enabled
3. Set Type to Inbound or Outbound depending on your requirements.
4. Set Authorisation Type to OAuth2
5. Select your client token configuration.
6. Click Authenticate Email Account to perform the authentication process which provides access to your Google/Microsoft account.
   1. POP, IMAP, and SMTP settings for Outlook.com - Microsoft Support
   2. For POP Outlook add to the properties mail.pop3s.auth.xoauth2.two.line.authentication.format=true
   3.