You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
= s_("GitLabPages|When using Pages under the general domain of a GitLab instance (%{pages_host}), you cannot use HTTPS with sub-subdomains. This means that if your username/groupname contains a dot it will not work. This is a limitation of the HTTP Over TLS protocol. HTTP pages will continue to work provided you don't redirect HTTP to HTTPS. %{docs_link_start}Learn more.%{link_end}").html_safe % { pages_host: pages_host, docs_link_start: docs_link_start, link_end: link_end }
Copy file name to clipboardExpand all lines: doc/administration/incoming_email.md
+56
Original file line number
Diff line number
Diff line change
@@ -615,3 +615,59 @@ incoming_email:
615
615
# Whether the IMAP server uses SSL
616
616
ssl: true
617
617
```
618
+
619
+
#### Microsoft Graph
620
+
621
+
> Introduced in [GitLab 13.11](https://gitlab.com/gitlab-org/gitlab/-/issues/214900).
622
+
623
+
GitLab can read incoming email using the Microsoft Graph API instead of
624
+
IMAP. Because [Microsoft is deprecating IMAP usage with Basic Authentication](https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-oauth-2-0-support-for-imap-and-smtp-auth-protocols-in/ba-p/1330432), the Microsoft Graph API will soon be required for new Microsoft Exchange Online
625
+
mailboxes.
626
+
627
+
To configure GitLab for Microsoft Graph, you will need to register an
628
+
OAuth2 application in your Azure Active Directory that has the
629
+
`Mail.ReadWrite`permission for all mailboxes. See the [MailRoom step-by-step guide](https://github.com/tpitale/mail_room/#microsoft-graph-configuration)
630
+
and [Microsoft instructions](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app)
631
+
for more details.
632
+
633
+
Record the following when you configure your OAuth2 application:
634
+
635
+
- Tenant ID for your Azure Active Directory
636
+
- Client ID for your OAuth2 application
637
+
- Client secret your OAuth2 application
638
+
639
+
##### Restrict mailbox access
640
+
641
+
For MailRoom to work as a service account, the application you create
642
+
in Azure Active Directory requires that you set the `Mail.ReadWrite` property
643
+
to read/write mail in *all* mailboxes.
644
+
645
+
To mitigate security concerns, we recommend configuring an application access
646
+
policy which limits the mailbox access for all accounts, as described in
The Microsoft Graph API is not yet supported in source installations. See [this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/326169) for more details.
Internal Tracking to count number of unit tests parsed for planning of future code testing features. Data available [here](https://app.periscopedata.com/app/gitlab/788674/Verify:Testing-Group-Metrics?widget=10454394&udv=0)
> Introduced in [GitLab 13.11](https://gitlab.com/gitlab-org/gitlab/-/issues/214900)
242
+
243
+
Service Desk can be configured to read Microsoft Exchange Online mailboxes with the Microsoft
244
+
Graph API instead of IMAP. Follow the [documentation in the incoming e-mail section for setting up an OAuth2 application for Microsoft Graph](../../administration/incoming_email.md#microsoft-graph).
The Microsoft Graph API is not yet supported in source installations. See [this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/326169) for more details.
270
+
239
271
## Using Service Desk
240
272
241
273
You can use Service Desk to [create an issue](#as-an-end-user-issue-creator) or [respond to one](#as-a-responder-to-the-issue).
0 commit comments