Skip to main content
Triggr sends approval requests and workflow notifications through Microsoft Graph from a mailbox in your MSP’s tenant, using Triggr’s own Entra app (application ID 93d55b6f-8b1c-41c6-845d-0bd579b3e68b). Admin consent gives the app Mail.Send across your tenant, which you can limit to one mailbox.

​
Set up Microsoft 365

Create a dedicated mailbox in the tenant, such as notifications@yourdomain.com: a shared mailbox (no licence needed under 50 GB) or a user mailbox licensed for Exchange Online.

​
Connect it in Triggr

You need a Global Administrator or Privileged Role Administrator in the tenant.
1

Open the integration

Go to Integrations > Microsoft Email and click Configure on the Base Configuration card.
The Base Configuration card with Status Not Configured, Admin Consent Not Required and a Configure button.
2

Enter your tenant ID

Enter your TenantID, or click Lookup By Domain to find it, leave ClientID and ClientSecret as they are and click Save Configuration.
The Microsoft Email configuration window with ClientID and ClientSecret already filled in (blurred), an empty TenantID field with a Lookup By Domain link, an Allow insecure TLS switch under Advanced, and a Save Configuration button.
3

Grant admin consent

Click Admin Consent on the card, sign in as an administrator of the same tenant and select Accept. The card’s Admin Consent status changes to Granted.

​
Create a sending profile

Go to Settings > Sending Profiles, click New Profile, set Profile Type to Microsoft, enter a unique Name (up to 50 characters) and the mailbox as From Email, then click Create Profile.
The Create New Sending Profile dialog with Profile Type Microsoft, Name Service desk (Microsoft) and From Email servicedesk@yourmsp.com, and Cancel and Create Profile buttons.
Choose the profile in Sending Profile on a Send Email or Await Form Submission step, or as the approval sender in Triggr Core. Steps without one send from app@triggr-app.com. See Sending profiles.

​
Limit the app to the sending mailbox

This uses RBAC for Applications in Exchange Online and needs the Exchange Online PowerShell module and the Organization Management role group. Grant admin consent first.
1

Find the app's object ID

In the Microsoft Entra admin center, go to Entra ID > Enterprise apps > All applications (not App registrations), search for 93d55b6f-8b1c-41c6-845d-0bd579b3e68b and copy its Object ID.
2

Grant Mail.Send for the mailbox only

3

Check the assignment

Application Mail.Send should show InScope True, and False for any other mailbox.
4

Remove the tenant-wide permission

Open the app under Enterprise apps and select Permissions. On the Admin consent tab, select … next to Mail.Send, then Revoke permission. This needs at least Cloud Application Administrator.
Changes take 30 minutes to 2 hours to apply. Add mailboxes later with Set-ManagementScope. Clicking Admin Consent again grants Mail.Send tenant-wide again, so revoke it afterwards.

​
Troubleshooting

Use a domain verified in your tenant, such as your .onmicrosoft.com domain, or paste the Tenant ID from Entra ID > Overview into TenantID.
Check TenantID and that Admin Consent shows Granted. If ClientID or ClientSecret were changed, click Unlink, configure again and grant consent again.
The app can’t send as the From Email mailbox. Check it’s in the management scope with Test-ServicePrincipalAuthorization, and allow up to 2 hours for changes.
From Email must match a mailbox in the connected tenant exactly: a shared mailbox, or a user mailbox licensed for Exchange Online.
Set up SPF, DKIM and DMARC for Exchange Online. See Microsoft’s email authentication guidance.