送信リンクを設定する

When you configure an outgoing link to an external application, Crowd requests data from this application, which means that it acts as the OAuth client. This type of link is primarily used in Crowd to create the OAuth 2.0 integration for popular mail servers.

OAuth 2.0 for SMTP outgoing mail servers is supported in Crowd 6.1 and above.


On this page:

We’ve created an outgoing OAuth 2.0 integration primarily because Google and Microsoft announced deprecating basic authentication. This means you wouldn’t be able to use these providers (Gmail, Microsoft Exchange Online) if you were authenticating using basic auth. To fix this, you need to configure the OAuth 2.0 integration with these providers, and then update the configuration of your mail servers.

You don’t need to take any actions if you’re using IMAP or POP3, these will continue to work.

以下を確認する必要があります。

送信リンクを作成するには、次の手順に従います。

  1. Crowd Administration Console にログインします。

  2. In the top navigation bar, go to Settings, then Application Links.

  3. [リンクを作成] を選択します。

  4. In a new dialog that opens, select External application, and then choose Outgoing as the direction.

  5. 次のセクションの説明に従って詳細を入力します。

リンクを設定するには、次の手順に従います。

設定するプロバイダーを次の中から 1 つ選択します。Google または Microsoft を選択すると、メール サーバーの OAuth 2.0 統合を作成できます。この場合、一部のフィールドは事前入力されます。

  • Google

  • Microsoft

  • カスタム (内部ツールまたは他のプロバイダー)


If you've chosen authorization code as the grant type, copy the Redirect URL and register it in your external application to obtain the client ID and client secret required to complete the configuration.

If you’re using Google or Microsoft as service providers, you’ll be able to copy the Redirect URL right away. For custom providers, you need to first provide the Authorization endpoint and Token endpoint. For more information on registering the URL with Google or Microsoft, check out the following guides:

Different providers might have different requirements related to the redirect URL. For example, Google doesn't allow it to be a private IP address. Make sure you provide an external URL (for example, of a load balancer for Crowd Data Center).

残りの情報を入力します。ここでは、次のすべてのフィールドについて説明します。

名前

説明

クライアント ID

The client ID that's generated by the external application after registering Crowd’s Redirect URL. This is the public identifier of the application.

クライアント シークレット

The client secret that's generated by the external application after registering Crowd’s Redirect URL. This is the shared secret between Crowd and the application, which ensures the authorization is secure.

スコープ

The required OAuth 2.0 scopes (permissions) that control what Crowd can do in the external application. You need to specify different scopes for email servers. 

For Google, we recommend this scope: https://mail.google.com (for IMAP, POP3, and SMTP).

Microsoft の場合は、使用するプロトコルに応じて、常に offline_access スコープと 1 つ以上の追加スコープを使用することをお勧めします。スコープは、Microsoft アカウントの種類とメール プロトコルの種類によって異なります。

  • If you're using non-GCC (Government Community Cloud) accounts, we recommend the following scopes:
    https://outlook.office.com/IMAP.AccessAsUser.All (for IMAP)
    https://outlook.office.com/POP.AccessAsUser.All (for POP3)
    https://outlook.office.com/SMTP.Send (for SMTP)
    offline_access

  • For GCC accounts, use:
    https://outlook.office365.com/IMAP.AccessAsUser.All (for IMAP)
    https://outlook.office365.com/POP.AccessAsUser.All (for POP3)
    https://outlook.office365.com/SMTP.Send (for SMTP)
    offline_access

For more information about scopes available in Google and Microsoft, see the detailed information at the Microsoft & Google sites.

認可エンドポイント (認可コードのみ)

The HTTPS URL where authorization to use OAuth 2.0 is started.

トークン エンドポイント

The HTTPS URL where refresh token requests are sent. As OAuth 2.0 tokens have an expiry, Crowd will periodically update the token.

Redirect URL (authorization code only)

The Redirect URL that must be registered in the external application to obtain its client ID and client secret. This redirects the authentication flow back to Crowd.

After you save the link, it will appear on the list together with other application links. You'll now be able to select this link when configuring mail servers.

Jira に組み込まれている以下の機能でリンクを使用できます。

Crowd ドキュメント

最終更新日 2024 年 9 月 26 日

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する
Powered by Confluence and Scroll Viewport.