Configuring accounts
Before you can scan email in Microsoft 365 or Google Workspace mailboxes, you must connect to a respective server.
Adding a Microsoft 365 account in FortiMail requires your Tenant ID, Application ID, and Application Secret. Adding a Google Workspace account in FortiMail requires an email address designated for the administrator, and the account's JSON content.
When acquiring the Tenant ID and Application ID from Microsoft 365, you must also grant consent permissions for the admin.
Add the following permissions for the administrator in Microsoft 365:
- User.Read.All
- Mail.ReadWrite
- Mail.Send
- GroupMember.Read.All
By default, User.Read is added.
To create a Microsoft 365 account
-
Go to View > Microsoft 365 & Google Workspace.
-
Go to System > Account > Account.
-
Click New.
-
Leave Status enabled.
-
Set Type to Microsoft 365.
-
Enter the Tenant ID, Application ID, and the Application Secret.
You receive log on credentials when you create the custom application on Microsoft Azure. For details, see the Azure documentation.
-
Select a regional Service Endpoint appropriate to your geographical location.
-
Enable Real-time Scan if you wish to conduct real-time scanning of emails that match certain criteria specified in a real-time scan policy. For more information, see Enabling and configuring real-time scanning.
-
Optionally, click New under User Filter Setting to configure user filter settings.
Enable Status, select the appropriate user Type, and specify additional options depending upon the filter type selected, then click Create.
FortiMail supports the importation of Azure AD user group memberships, which can subsequently be applied to domain level recipient policies.
To use this feature, select Azure AD Group from the Type dropdown when configuring User Filter Settings.
This feature is currently only available when configuring Microsoft 365 accounts.
- When finished configuring the account, click Create.
To create a Google Workspace account
-
Go to View > Microsoft 365 & Google Workspace.
-
Go to System > Account > Account.
-
Click New.
-
Leave Status enabled.
-
Set Type to Google Workspace.
-
Enter the Admin email and the JSON content.
You receive JSON credentials when you create the custom application on Google Workspace. For details, see the Google documentation.
-
Enable Real-time Scan if you wish to conduct real-time scanning of emails that match certain criteria specified in a real-time scan policy. For more information, see Enabling and configuring real-time scanning.
-
Optionally, click New under User Filter Setting to configure user filter settings.
Enable Status, select the appropriate user Type, and specify additional options depending upon the filter type selected, then click Create.
-
When finished configuring the account, click Create.
If successful, your account will appear in the account list, showing FortiMail connected to Microsoft 365 or Google Workspace.
-
Click View User List to view the following email user information under the selected account:
-
Status: Displays whether the user is subscribed or not.
-
Email: User names of the email users on the Microsoft 365 or Google Workspace account.
-
Expiry Date: Subscription expiry date and time to notifications of the user's real-time email.
-