By default, EmpowerID is configured to use SMTP as the provider for email delivery. However, SMTP is not the only provider option. You can elect to use SendGrid (requires a SendGrid account with an API key), Exchange Web Services (on-premise or Office 365) or both SMTP and Exchange Web Services (EWS). If you choose to use more than one provider, you order the precedence by setting the priority for each. The provider with the lowest priority has the higher precedence. By default, SMTP has precedence. You can change this at any time.
You can configure EmpowerID to process emails differently, depending on your scenario. These scenarios include the following:
...
Simple SMTP relay – In this scenario, you specify the SMTP server that EmpowerID uses to send automated emails on behalf of the system and the default from address for all EmpowerID notifications. Examples of these types of emails include welcoming emails sent to new employees, emails sent to users when their passwords are reset by the help desk, and pending password expiration notifications, etc.
...
...
...
...
...
...
...
...
| title | SMTP Relay |
|---|
To configure EmpowerID for simple SMTP relay, do the following:
...
In the SMTP Mail Delivery Settings pane, enter the following information:
...
Adjust the form data as needed:
BCC Recipient for All Emails – Optional; sends a copy of every email to the specified addresses as BCC.
Enable Email Test Mode – If this is selected, all emails will be sent to the specified address and only that address.
Test Mode Recipient – This specifies the address emails are to be sent when Enable Email Test Mode is selected. The replaced recipients can be seen in the email’s headers.
Account with Vaulted Password for Authenticated SMTP – Used with Authenticated SMTP; leave empty for Simple SMTP Relay.
Send SMTP Using SSL – This setting enables SSL for email delivery.
Send SMTP Using TLS Security – This setting enables TLS for email delivery.
SMTP From Address – This setting is used to specify the default From address the system should use when sending automated emails
...
...
...
...
...
...
Adjust the form data as needed:
BCC Recipient for All Emails – Optional; sends a copy of every email to the specified addresses as BCC.
Enable Email Test Mode – If this is selected, all emails will be sent to the specified address and only that address.
Test Mode Recipient – This specifies the address emails are to be sent when Enable Email Test Mode is selected. The replaced recipients can be seen in the email’s headers.
Account with Vaulted Password for Authenticated SMTP
...
...
...
...
...
...
...
...
Note
When configuring EmpowerID for authenticated SMTP, the mailbox selected for reading and processing emails takes precedence over the setting entered in the SMTP From Address setting.
If you are using a mail delivery system other than Exchange that supports SMTP, then you need to create a tracking-only account store and add an account with the appropriate credentials, as well as a user principal name, for that system to that account store. You then vault the password for that user account.
...
| title | Office 365 / Exchange EWS |
|---|
...
Next, if the user account to be used by EmpowerID to authenticate to the SMTP server does not have a password that is vaulted in EmpowerID, do the following to vault it:
On the Email Settings page, click the account link for the user account in the Account With Vaulted Password For Authenticated SMTP field.
This directs you to the View One page for the user account.
On the View One page, expand the Actions accordion and click Edit Vaulted Account Password.
In the Service Account Credentials form that opens, do the following:
Click Encryption Certificate and select a certificate for encrypting the password.
Enter the password in the Password and Confirm Password fields
Click Submit.
Configure for Office 365 / Exchange EWS
Expand Infrastructure Admin > EmpowerID Servers and Settings on the navbar and select Email Settings.
Select Exchange EWS from the Email Delivery Mode drop-down.
...
On the Email Settings page, edit the following settings:
...
Office 365 / Exchange Mailbox for Send and Receive — This specifies the user account EmpowerID uses to authenticate to the EWS server as well as to send automated emails on behalf of the system. This account needs to have its password vaulted in EmpowerID.
...
Adjust the form data as needed:
BCC Recipient for All Emails – Optional; sends a copy of every email to the specified addresses as BCC.
Enable Email Test Mode – If this is selected, all emails will be sent to the specified address and only that address.
Test Mode Recipient – This specifies the address emails are to be sent when Enable Email Test Mode is selected. The replaced recipients can be seen in the email’s headers.
Microsoft 365 / Exchange Delivery Settings – Select the user that EmpowerID will use to send email through the web service. Make sure the account you select is an account that has a mailbox on the mail system you are targeting.
Microsoft 365 / Exchange Web Service URL – This specifies the URL to the EWS server. If you are using Office 365, the value of the URL should be
https://outlook.office365.com/EWS/Exchange.asmx.
...
...
...
...
...
...
Click Save.
...
Click Save.
Configure Email Provider Priority
EmpowerID allows you to configure the priority of email providers, determining the sequence in which they are assessed for usage. By assigning a lower numerical value to a particular email provider's priority, you can indicate your preferred method for sending emails within the system.
Expand Infrastructure Admin > EmpowerID Servers and Settings on the navbar and select Email Provider
Click the Edit button beside the provider whose priority you want to change.
Adjust the numeric value as needed and click Save.
Repeat steps 2 and 3 for each provider you want to edit.
Configure Email Approvals
| Note |
|---|
For EmpowerID to process email approvals, the task or operation being approved or rejected must have the EnableBulkApproval set to true. This is set in Workflow Studio. If you are using SMTP, follow the procedure outlined in |
...
...
...
On the Email settings page, select Enable Approve by Email Reply.
...
...
Click Save.
...
| title | How To Vault Account Passwords |
|---|
...
On the navbar, expand Privileged Access and select Shared Credentials.
Select the All Shared Credentials tab and then click the Add button.
...
...
Enter a name for the shared credential in the Name and Display Name fields.
...
Click the Shared Credential Policy drop-down and select the appropriate one to link to the credentials. Here are the default options for non-computer credentials:
Non-Computer Creds - Multi-Check-Out - No Password Reset — Select this policy to create credentials for an account where more than one check out is allowed and you do not want EmpowerID to reset the password when a user checks in the credentials.
Non-Computer Creds - No Approval, No Multi Check-Out with Password Reset — Select this policy to create credentials for an account where more than one check out is not allowed, no approval is required, and you want EmpowerID to reset the password when a user checks in the credentials.
Non-Computer Creds - No Multi-Check-Out with Password Reset — Select this policy to create credentials for an account where more than one check out is not allowed and you want EmpowerID to reset the password when a user checks in the credentials. Please note that this policy type is only valid for use with user accounts with passwords that have been vaulted in EmpowerID. The user account must belong to a domain or account store that has been inventoried by EmpowerID.
Service Account with Scheduled Password Reset — Select this policy for credentials for a Windows Service account or IIS App pool identity.
When you select this policy, EmpowerID resets the password against all Windows servers in your environment that have Windows Services or App Pools. Please note that this policy type is only valid for use with service accounts with passwords that have been vaulted in EmpowerID. The service account must belong to a domain or account store that has been inventoried by EmpowerID.
...
Underneath Location, click Select a Location, then select a location for the credential and click Save.
...
...
Enter a description in the Description field.
...
In the User Name field, enter the user name for the account you are vaulting.
...
In the Password field, enter the password for the account you are vaulting.
...
Optionally, enter any notes in the Notes field.
...
Select Enabled.
...
Click Save.
...
If you have not yet entered your master password for this session, EmpowerID prompts you to do so. Enter your master password and click OK.
...
...
If you have not yet created a master password for yourself, EmpowerID prompts you to do so. Enter a password in the Password and Confirm Password fields and click OK.
...
...
on the navbar and select EmpowerID System Settings.
Search for EmailApprovalbyEmailEnabled and click the Edit
button for the setting.
Set the Value to True and click Save.
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
| Div | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||
IN THIS ARTICLE
|