Summary:
Microsoft is making changes to Microsoft 365 authentication in December 2026, and the current username/password method will no longer work. This requires a new authentication method called OAuth 2.0. Cargas has implemented a new email sending mechanism that adapts to this change.
If you use Microsoft 365 to send emails such as invoices and statements to your customers from Cargas Energy, you will need to take immediate action so that emails will continue arriving in your customers’ inboxes after March 2026.
Your Microsoft 365 admin must perform crucial configurations in Microsoft Entra ID (formerly Azure AD) and Microsoft 365, in order to use the new OAuth2
This is Step One of the Two Part process:
-
Overview Guide: Microsoft 365 and Outgoing Email from Cargas Energy
- Configure Microsoft 365 Email Sending in Cargas Energy (You Are Here)
- Prepare your Microsoft 365 Tenant for Email Sending from Cargas Energy
Process:
The following article will guide you through the setup in Cargas Energy. We will engage the following steps:
- Setup Email Send Settings in Cargas Energy
- Proceed to configure your Microsoft 365 and Microsoft Entra tenant (also necessary)
Prerequisite: obtain your Microsoft Tenant ID
Ask your Microsoft administrator for the Tenant ID. They or you can obtain it by following these steps:
- As Administrator, log into entra.microsoft.com
- Click “Overview” in the sidebar
- Copy the Tenant Id you see in the Basic Information section.
1. Setup Email Send Settings in Cargas Energy
- In Cargas Energy, go to Admin > Setup > Email Settings
- Select the edit (pencil) icon next to Email Settings
- In the Profile Management screen, if no email profile exists yet, select the plus icon to create a new one, or edit an existing profile if you or your Cargas contact has created a new Microsoft email profile already.
- On the “Create Email Profile” screen, select the “Microsoft 365” template, which fills in some necessary values.
- Then fill in the appropriate values for your account
- Be sure to fill in “From Address”, “Username” (these two are often the same), and your OAuth2 Tenant ID you copied earlier (be sure it is the tenant ID, as they all look somewhat similar).
- For now, leave the text “OAuth2 info required” in the OAuth2 Client ID field, as your Microsoft Administrator has likely not generated that yet. You can come back and edit that later once they provide it to you.
- Next, generate the certificate and leave the "OAuth2 Client Secret" field alone. To generate a new certificate, fill in the “OAuth2 Certificate” with your desired filename for the certificate. The extension “.pfx” is optional. Both .pfx (password-protected certificate) and .cer (public part of the certificate) files will be generated. Also, fill in the password that you want to use to encrypt that certificate. Note that the Client Secret becomes disabled; that is perfectly fine when using certificate authentication.
- Select the “Submit” button. Now re-open that profile and you will see a download link for the public certificate (a .cer file).
- For Cargas Energy versions 2026.02 and earlier, mark the new profile as Inactive. Activate it before step 13, or the profile will not be found in Admin > Setup > Company.
- After you provide the .cer file to your Microsoft 365 Administrator, they should configure Microsoft 365 and Microsoft Entra and upload the public .cer file there
- Your Microsoft 365 Administrator should then provide you with the Client ID of the OAuth 2.0 application they set up. Edit the profile, and paste in that ID in the corresponding Client ID field.
- To enable the new profile, it must be set as the default on the Company setup page or as a divisional default. For divisional email profiles, be sure to set the new profile for the corresponding division under Admin > Setup > Company or Admin > Setup > Company > Edit on the Division
- You can now test an email send with the “Send Test Email” button. In late Summer 2025, we have noticed that some Cargas Energy customers’ server setups show an error when pressing the “Send Test Email” button. We are actively seeking to observe and fix this issue. If it affects you, you can test the email by setting the profile as default in your Company or Division settings, then email a single invoice or statement to a test customer account.
2. Proceed to Microsoft 365/Entra setup
Please continue now to configuration of your Microsoft 365 and Microsoft Entra tenant:
Comments
OAuth2 Client ID is required but your instructions do not inform us where we need to go and get that information and if it is after we register an app, we can't due that without the certificate and the certificate can't be made without the OAuth2 ClientID.
Michael, thanks for this feedback; you are right, the Client Id step indeed depends on Entra configuration from the related setup article. I have updated these articles to document and highlight the following:
In this case, you are able to (and should) first save the email profile, leaving the placeholder text "OAuth2 info required" (or any text for that matter) in the Client ID field. Then, after the Microsoft Administrator creates the OAuth 2.0 application in Entra, you can obtain the actual Client ID, edit the email profile in Cargas Energy, and paste the correct Client ID in the field.
If you find encounter issues we this, please let us know. We are eager to make this as smooth as possible, and will adapt quickly to your useful suggestions. Thank you again!
Article is closed for comments.