Configuring email support

You need to set up an email provider from which emails are sent. Choose between Microsoft 365 or an SMTP provider like G Suite. Microsoft 365 uses the OAuth2.0 protocol which uses service tokens, eliminating the need to share user credentials.

Only one active provider can be configured at a time, and for security reasons, only the credentials for the active provider are stored. This avoids storing of sensitive data that is not currently in use. Activating a new provider will deactivate the currently active one. Selecting None will delete any saved settings.

Configuring an SMTP email provider

SMTP is a standard protocol used for sending emails, and it allows you to connect to the email server of your chosen provider to send messages.

Do the following:

1. In the Administration activity center, go to Settings.

2. Under Email provider, select SMTP.

3. Enter the SMTP server address from which to send email notifications.

4. Enter the port number for the email server.

5. Choose the security type:

   • StartTLS

   • SSL/TLS

   • None

6. Enter the sender email address. This is the email address that recipients will see in the From field of the email.

7. For Username, do one of the following:

   • If you intend to use the sender email address for email server credentials, select the Same as sender email address checkbox.

   • If the sender email address will not be used for email server credentials, clear the Same as sender email address checkbox and enter an email address in the Username field.

8. Enter the email account password.

9. Click Save to activate the email provider.

   Information noteIf you have a previously active provider, it will be deactivated.
   

10. Click Send test email to verify the configuration.

11. Enter the email address where you want to receive a test message and click Send.
    If the configuration is correct, you should receive a message with the subject "Test email from the Qlik Cloud Administration activity center" from the configured sender email address.

    Information noteTo prevent received emails from ending up in the spam folder, add the IP addresses for your region to the allowlist. These addresses can be also used for DNS SPF records. For more information see Allowlisting domain names and IP addresses.

Configuring a Microsoft 365 email provider using OAuth2

When setting up Microsoft 365 as email provider in Qlik Cloud, you need to provide tenant ID, client ID, and client secret. These details are part of the OAuth 2.0 authentication process, ensuring secure communication between your application and Microsoft 365.

Do the following:

1. In the Administration activity center, go to Settings.

2. Under Email provider, select Microsoft 365.

3. Enter the sender email address.

   This should be a UserPrincipalName (UPN) for a Microsoft Entra ID user account. The email address that recipients will see in the From field of the email will be the user's full email address.

   Information note

   You can restrict the sender to specific mailboxes. For more information, see Limiting application permissions to specific Exchange Online mailboxes.

4. For Tenant ID, enter the unique identifier assigned to your Microsoft 365 tenant.

5. Enter the Client ID and Client secret for your Active Directory app registration. These are used for authentication with the email service.

6. Click Save to activate the email provider.

   Information noteIf you have a previously active provider, it will be deactivated.
   

7. Click Send test email to verify the configuration.

8. Enter the email address where you want to receive a test message and click Send.
   If the configuration is correct, you should receive a message with the subject "Test email from the Qlik Cloud Administration activity center" from the configured sender email address.

   Information noteTo prevent received emails from ending up in the spam folder, add the IP addresses for your region to the allowlist. These addresses can be also used for DNS SPF records. For more information, see Allowlisting domain names and IP addresses.

Obtaining the tenant ID, client ID, and client secret

To find the tenant ID, log in to the Microsoft Entra admin center and go to Identity > Overview. The Tenant ID is shown on the Properties tab.

To obtain the client ID and client secret, you need to create a new app registration in Microsoft Entra ID. Once the app is created, do the following:

1. Go to the app overview page and copy the Application (client) ID.

2. Go to Certificates & secrets > Client secrets and select New client secret. Copy the secret and store it safely.

You also need to add Microsoft Graph permission for sending emails.

1. Go to API permissions and click Add a permission.

2. Under Microsoft APIs, click Microsoft Graph and select Application permissions.

3. Add the permission Mail.Send.

For more information, see the following Microsoft Learn articles:

• How to find your Microsoft Entra tenant ID

• Quickstart: Register an application with the Microsoft identity platform

• Quickstart: Configure a client application to access a web API > Application permission to Microsoft Graph