--- title: Manage email providers using the admin console description: Configure email provider settings though the admin console component: pingoneaic page_id: pingoneaic:tenants:email-provider-ui canonical_url: https://docs.pingidentity.com/pingoneaic/tenants/email-provider-ui.html llms_txt: https://docs.pingidentity.com/pingoneaic/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md section_ids: configure-email-smtp-ui: Configure a custom SMTP provider configure-email-graph-ui]: Configure a Microsoft Graph email provider update-email-provider-configuration: Update the email provider configuration revert-the-email-provider-to-use-the-built-in-smtp-server: Revert to the built-in provider --- # Manage email providers using the admin console You can configure a custom SMTP provider or Microsoft Graph external email service in the Advanced Identity Cloud admin console. Learn more about email providers in [Email provider](email-provider.html). ## Configure a custom SMTP provider 1. In the Advanced Identity Cloud admin console, go to [icon: power, set=material, size=inline] Integrations > Email Provider. 2. If an external email provider is already configured, click Switch to Built-in Provider to revert to the built-in SMTP server, and then click Confirm. 3. On the Email Provider page, click [icon: add, set=material, size=inline]Custom Provider. 4. In the Add a Custom Email Provider modal, click Custom Provider, and then click Next. 5. Enter details in the following fields: | | | | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | From Address | Email address of the organization or individual sending the email.Example: `mycompany@example.com`.You can also set this field to an ESV placeholder instead of a literal email address by clicking the token icon ([icon: token, set=material, size=inline]) to select an ESV value. When an ESV is set, the field becomes read-only and the From Name field is disabled. | | From Name | Name of sending organization. | | Host | Hostname or IP address of your SMTP server. | | Port | Port number of your SMTP server.Many SMTP servers require the use of a secure port such as 465 or 587.Typically, use port 587 with STARTTLS or port 465 with implicit SSL/TLS. Many ISPs flag email from port 25 as spam. | | Username | Username for your SMTP server account. | | Password | Password for your SMTP server account. | 6. Click Show advanced settings, and edit the options and fields: | | | | ------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Socket Connection Timeout (ms) | Elapsed time before Advanced Identity Cloud times out due to unsuccessful socket connection to the SMTP server. A setting of `0` disables this timeout.The default is `300000` ms (5 minutes). | | Socket Write Timeout (ms) | Elapsed time before Advanced Identity Cloud times out because the client can't write to the SMTP server. A setting of `0` disables this timeout.The default is `300000` (5 minutes). | | Socket Timeout (ms) | Elapsed time before Advanced Identity Cloud times out due to inactivity. A setting of `0` disables this timeout.The default is `300000` (5 minutes). | | Use STARTTLS | * If enabled, and if the SMTP server supports the STARTTLS command, then Advanced Identity Cloud switches to a TLS-protected connection before issuing any login commands. * If the SMTP server does not support STARTTLS, the connection continues without the use of TLS.Enabled by default. | | Use SSL | If enabled, Advanced Identity Cloud uses SSL to connect to the SMTP server.Disabled by default. | | Allow UTF-8 | If enabled, adds support for UTF-8 (Non-ASCII) characters in the *local* part of email addresses (everything before the `@` character).Disabled by default. Do not set this property unless your SMTP provider supports UTF-8 characters. Learn more in International email addresses. | 7. Click Save. ## Configure a Microsoft Graph email provider 1. In the Advanced Identity Cloud admin console, go to [icon: power, set=material, size=inline] Integrations > Email Provider. 2. If an external email provider is already configured, click Switch to Built-in Provider to revert to the built-in SMTP server, and then click Confirm. 3. On the Email Provider page, click [icon: add, set=material, size=inline]Custom Provider. 4. In the Add a Custom Email Provider modal, click Microsoft Graph, and then click Next. 5. Enter details in the following fields: | | | | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | From Address | Email address of the organization or individual sending the email.Example: `mycompany@example.com`.You can also set this field to an ESV placeholder instead of a literal email address by clicking the token icon ([icon: token, set=material, size=inline]) to select an ESV value. When an ESV is set, the field becomes read-only and the From Name field is disabled. | | From Name | Name of sending organization. | | Mail Endpoint | The URI for the Microsoft Graph `sendMail` endpoint.Typical format:```none https://graph.microsoft.com/v1.0/users/{user}@{tenant}.onmicrosoft.com/sendMail ``` | | Client ID | Client ID used to request an access token from the token endpoint. This is obtained during [Azure application creation](email-provider-configure-microsoft-azure-tenant.html#note-clientId). | | Client Secret Identifier | Client secret used to request an access token from the token endpoint. This is obtained during [Azure application creation](email-provider-configure-microsoft-azure-tenant.html#note-clientSecret). | | Token Endpoint | OAuth 2.0 token endpoint.Typical format:```none https://login.microsoftonline.com/{tenant}.onmicrosoft.com/oauth2/v2.0/token ``` | 6. Click Show advanced settings, and edit the options and fields: | | | | ------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Socket Connection Timeout (ms) | Elapsed time before Advanced Identity Cloud times out due to unsuccessful socket connection to the server. A setting of `0` disables this timeout.The default is `300000` ms (5 minutes). | | Thread Pool Size | Emails are sent in separate threads managed by a thread pool. This property sets the number of concurrent emails that can be handled at a specific time. The default thread pool size (if none is specified) is `20`. | | Scope | The OAuth 2.0 scopes to request when Advanced Identity Cloud obtains an access token from the token endpoint. Enter the scopes as a JSON array of strings.The default value is:```none https://graph.microsoft.com/.default ```This requests all application permissions granted to the app registration in your Microsoft Azure tenant. You don't normally need to change this value. | | Scope Delimiter | Scope delimiter to use. Defaults to space. | 7. Click Save. ## Update the email provider configuration 1. In the Advanced Identity Cloud admin console, go to [icon: power, set=material, size=inline] Integrations > Email Provider. 2. On the Email Provider page, click Edit. 3. Update the details. | | | | - | ---------------------------------------------------------------------------------------------------------------------------------------------------- | | | For security reasons, password and secret fields are not pre-populated. Leave these fields blank unless you need to change the existing credentials. | 4. Click Save. ## Revert to the built-in provider If you need to revert the email provider to use the built-in SMTP server: 1. In the Advanced Identity Cloud admin console, go to [icon: power, set=material, size=inline] Integrations > Email Provider. 2. On the Email Provider page, click Switch to Built-in Provider. 3. Click Confirm. | | | | - | ------------------------------------------------------------------------------------------------------------ | | | The built-in SMTP server is for testing purposes only and has the limitations noted at the top of this page. |