How to send the encrypted email from SSM

[kishorekumarmb]

Use case:

           How to send the encrypted email from SSM for credentials notification to End-user

Solution:

           Saviynt doesn’t support encrypted message directly for end user. However Encrypted message can be sent by using O365 as SMTP relay in SSM along with online Exchange.

Prerequisite:

• O365 account to be used as SMTP relay for mail notification.
• Admin for writing Online exchange rules for mail encryption.

Email Message flow:

 

Steps:

• Configure O365 SMTP in SSM in email server

• Rules written in online exchange based on From address, Subject and enforce encryption. Sample Rule screen shot:

• Once the email is triggered the end-user should receive encrypted email.

• The user can authenticate themselves by OTP or by their email provider login.

Parameters to be considered:

      The throttling limits for the SMTP Authentication protocol are:

1. 30 messages per minute
2. Recipient rate limit of 10,000 recipients per day

Exceeding these limits will cause the following issues:

Exceeding the per minute limit causes email delivery delays, any excess in message submission will be throttled and successively carried over to the following minutes.

Exceeding the per day limit causes the following error message:

554 5.2.0 STOREDRV.Submission.Exception:SubmissionQuotaExceededException

Remediation/Mitigation

           The email history job should be run as single threaded instead of multiple threaded. This will delay the processing time so there is chance of sending only 30 messages per minute.

            This can be achieved in configuring in global config of SSM.       

If still issue persist, then SSM provides option put the thread in sleep for some time after very email trigger.

In external config can specify the sleep time of thread as below

email.delay.seconds=2

Reference:

• https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?vi...
• https://support.microsoft.com/en-us/office/how-do-i-open-a-protected-message-1157a286-8ecc-4b1e-ac43...
• https://support.microsoft.com/en-us/office/learn-about-protected-messages-in-microsoft-365-2baf3ac7-...
• https://docs.microsoft.com/en-us/microsoft-365/compliance/legacy-information-for-message-encryption?...
• https://docs.microsoft.com/en-us/exchange/troubleshoot/send-emails/smtp-submission-improvements