How to send the encrypted email from SSM

[sudeshjaiswal]

Use Case

How to send the encrypted email from SSM for credentials notification to End-user

Pre-requisites

• O365 account to be used as SMTP relay for mail notification.
• Admin for writing Online exchange rules for mail encryption.

Applicable Version(s)

All

Solution

 Saviynt doesn’t support encrypted messages directly for end users. However Encrypted messages can be sent by using O365 as an SMTP relay in SSM along with online Exchange.

Email Message flow:

Steps:

1. Configure O365 SMTP in SSM in the email server

2. Rules are written in online exchange based on From address, Subject, and enforce encryption.

3. Once the email is triggered the end user should receive an encrypted email.
4. The user can authenticate themselves by OTP or by their email provider login

Parameters to be considered:

The throttling limits for the SMTP Authentication protocol are:

1. 30 messages per minute
2. Recipient rate limit of 10,000 recipients per day

Exceeding these limits will cause the following issues:

Exceeding the per-minute limit causes email delivery delays, any excess in message submission will be throttled and successively carried over to the following minutes.

Exceeding the per-day limit causes the following error message:

554 5.2.0 STOREDRV.Submission.Exception:SubmissionQuotaExceededException.

Remediation/Mitigation 

The email history job should be run as single-threaded instead of multiple-threaded. This will delay the processing time so there is a chance of sending only 30 messages per minute.

 This can be achieved by configuring the global config of SSM.

If still, the issue persists, then SSM provides the option put the thread to sleep for some time after every email trigger.

In the external config can specify the sleep time of the thread as below

email.delay.seconds=2

References

• https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?vi...
• https://support.microsoft.com/en-us/office/how-do-i-open-a-protected-message-1157a286-8ecc-4b1e-ac43...
• https://support.microsoft.com/en-us/office/learn-about-protected-messages-in-microsoft-365-2baf3ac7-...
• https://docs.microsoft.com/en-us/microsoft-365/compliance/legacy-information-for-message-encryption?...
• https://docs.microsoft.com/en-us/exchange/troubleshoot/send-emails/smtp-submission-improvements