Matt

Do you mean when the users ([email protected]) actually has an alias set up and sends from Sage CRM as [email protected]?

This is just a hunch... but can you create a distribution groups for example [email protected] and then add the users you need as members. Those Office365 users could then have SendAs permissions granted to the new distribution group?

As I said that is just a hunch.

Hi Jeff,

I'm referring to just straight forward emails, so in the admin area under Email & Documents - Email Configuration. I configure it to connecting using a particular email address. This address might be [email protected]

But the user might be set up as [email protected], when they try to send the email it fails. But if the user is set up as [email protected] then it works. So I need to some how allow relaying.

Hi Matt,

Have you tried granting the Application Impersonation role to the [email protected] user on office365?

msdn.microsoft.com/.../dn722377%28v=exchg.150%29.aspx

The following Knowledgebase article pertains to the Exchange integration but there the steps at the bottom under the section "Alternative Resolution" detail the steps to carry out on Office 365 to grant this role to a user account.

https://community.sagecrm.com/knowledgebase/w/onpremisekba/629.492-16618-exchange-online-the-account-does-not-have-permission-to-impersonate-the-requested-user.aspx

I'm not certain if it will work in this situation but it's worth a try.

Regards,

Kevin

Hi Kevin

Thanks for your suggestion - I've double checked and the user [email protected] does have Application Impersonation rights.

Playing around more the issue seems to be more Exchange than sTunnel/CRM - I've set up Outlook to connect to Office365 via SMTP (to rule out sTunnel). Configured outlook to connect as [email protected] but told Outlook my email address is [email protected] and it's failing to send - 'Client does not have permissions to send as this Sender'.

Many thanks for all of your help, but it looks I have'll have to research this further.

Matt.

Hi All,

I have finally solved my issue - within Office365 you have to create a Security Group and then grant the user which is used by CRM permissions to it, within this group you need to create all the email addresses used by CRM

The above resolves the relaying issue, but you still need CRM to connect to either an IIS SMTP Server or sTunnel which in turn connects to Office365.

You can configure an Office 365 SMTP relay which authenticates based on your servers IP address rather than credentials and this allows you to send directly from CRM without the need for stunnel. It gives you a server address that you put in CRM without a username/password.

It is option 3 on this link: https://technet.microsoft.com/en-gb/library/dn554323%28v=exchg.150%29.aspx

EDIT: Also this means you can send from any email address as long as it belongs to a domain that Office 365 is aware of.

Hi,

The SMTP relay looks like a good solution. It also looks like there's also a higher rate limit than when using SMTP (with or without TLS).

Thanks,

Rob