Send Email

Identity Manager 4.8 and onwards, the engine checks to see if the mail server supports SSL, and if it supports, then it utilizes SSL. Therefore the mail server certificate must be added to the OpenText Identity Manager engine keystore.

Prior to Identity Manager 4.9, the application only supported basic authentication, which required users to provide SMTP server account credentials (user ID and password) to send emails through the mail server. With Identity Manager 4.9 and later versions, users can authenticate to the mail server using either basic or modern authentication methods.

Azure Active Directory uses modern authentication provided by the Office 365 OAuth authentication service. So if you are using Microsoft Outlook on Azure Active Directory as your mail server setup, then you need to register your application with Azure AD first. For more information on how to register your application, see Register an application with the Microsoft identity platform.

When creating a policy with the <do-send-email> action, you must set up a rule to use named passwords in the driver policy. This is because the engine uses the named passwords to read the SMTP server account password and the client secret in order to send email notifications. Each password is accessed via a key, for example, the direxml.engine.smtp key stores the SMTP server account password for basic authentication, while the dirxml.engine.smtp.clientsecret key stores the client secret for modern authentication. Both of these keys are stored in the named passwords at the active driverset level.