Connect to Outlook
This section shows how to set up a secure Outlook connection so automated workflows can send emails from standard addresses such as [email protected] or [email protected].
Overview
SlapFive's Automation Engine uses Microsoft’s Graph API to send emails through Outlook. We use Client Credentials–based authentication (OAuth 2.0) with a tenant-specific connection, which allows automations to send emails from approved mailboxes without needing an individual user to sign in.
Prerequisites
Microsoft 365 tenant (Exchange Online)
Admin access to Microsoft Entra ID (formerly Azure AD)
Admin access to Exchange Admin Center or PowerShell
Access to your company’s Workato workspace
Step 1. Register the Workato App in Microsoft Entra ID
Sign into your Azure portal and go to Microsoft Entra ID > App registrations > New registration.
Enter the following data and click Register.
Name: enter SlapFive Email Automation.
Supported account types: choose Accounts in this organizational directory only (Single tenant).
Redirect URI: set to:
https://www.workato.com/oauth/callback
Step 2. Add Microsoft Graph API Permissions
Open the new app and go to Manage > API permissions. Select + Add a permission and select Microsoft Graph APIs.
What type of permissions does your app require? choose Application permissions. (This is required for Client Credentials–based authentication.)
Select permissions: type
Mail.Send
Expand the Mail section in the results.
Check the box next to Mail.Send.
Click Add permissions.
Back on the API permissions page, click Grant admin consent for <your organization name> and confirm. This approves the permissions for all users in the tenant. If this step is skipped, non-admin users who try to create the Workato Outlook connection will see a “Need admin approval” message and won’t be able to proceed.
Step 3. Create a Client Secret
Go to Manage > Certificates & Secrets > Client Secrets, and click + New client secret.
Give it a descriptive name, choose an expiry (12 months or longer).
Click Add.
Copy the secret Value immediately — it won’t be visible later.
Step 4. Obtain the Client ID, Object ID, and Tenant ID
Go to Overview > Essentials. Copy and save these items:
Step 5. Obtain the User ID (User Principal Name)
Workato requires a “User ID” to identify the default mailbox the app will act on. This does not authenticate a user — it simply tells Microsoft Graph which mailbox to use.
Go to Microsoft Entra ID > Users and search for the mailbox you want the connection to send from (i.e. [email protected]
).
Copy the User Principal Name (which will usually be the same as the mailbox’s email address). You’ll enter this value later in SlapFive as the User ID or Default user.
Step 6. Grant Send-As Rights to Mailboxes
For each mailbox that you want your automations to send from (i.e. [email protected]
, [email protected]
), you must grant the app permission to send.
Option A – Exchange Admin Center
Go to Recipients > Mailboxes and select the mailbox.
Under Mailbox delegation, add the app created in Step 1, SlapFive Email Automation, under Send As.
Option B – PowerShell
Add-RecipientPermission -Identity "[email protected]" -Trustee "<AppDisplayName>" -AccessRights SendAs
Add-RecipientPermission -Identity "[email protected]" -Trustee "<AppDisplayName>" -AccessRights SendAs
Repeat for each mailbox that needs to send emails.
Step 7. Create the Outlook Connection in SlapFive
In SlapFive, go to Settings > Integrations and click to open the box named Outlook Connection. Enter this information and click the Connect button.
Repeat this step for each standard mailbox you’ll use (i.e. [email protected]
) using the same Tenant ID, Client ID, and Client secret but different Default user values.
Last updated