SMTP Mail Settings

[SS]

Hi,

Recently I have come across supported SMTP settings as below:

• SMTP Authenticated:
• Direct Send:
• SMTP Relay:
• 3rd Party Relay

These are values to which SMTP configuration parameter? Are these used as values for

'SMTP Authentication' attribute in the SMTP configuration? 

Where can I read more about these options as the Saviynt SMTP documentation does not have these values listed.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter06-EIC-Configurations/Config...

[Raghu]

@SS  Below article will help

https://forums.saviynt.com/t5/identity-governance/smtp-email-server-settings/m-p/15960

[SS]

I am sorry Raghu, but the URL that you shared does not have anything related to the options 

• SMTP Authenticated:
• Direct Send:
• SMTP Relay:
• 3rd Party Relay

[Raghu]

@SS 

1. SMTP Authenticated:

   • This involves using a username and password to authenticate with an SMTP server before sending emails.
   • Recommended when you have control over an SMTP server and want to ensure secure communication.

2. Direct Send:

   • Directly sends emails without authenticating with an SMTP server. It relies on the server's configuration and may not require credentials.
   • Recommended for scenarios where direct communication with the email server is acceptable, and no authentication is required.

3. SMTP Relay:

   • Involves using a dedicated server (relay) to forward emails. The relay server authenticates with an SMTP server on your behalf.
   • Recommended when your environment requires an intermediary for email communication or when there are restrictions on direct communication.

4. 3rd Party Relay:

   • Similar to SMTP Relay but involves using a third-party service for relaying emails.
   • Recommended when you want to leverage third-party services for email delivery, often providing additional features and scalability.

Recommendation:

• If security and control are top priorities, SMTP Authenticated or Direct Send may be suitable, depending on your email server configuration.
• If you prefer using an intermediary for email delivery or have specific requirements, SMTP Relay or 3rd Party Relay may be appropriate.
• https://forums.saviynt.com/t5/identity-governance/smtp-email-server-settings-options/m-p/69904

[SS]

ok @Raghu So, if we choose direct send, what should be the values in the the SMTP configuration in Saviynt?

[rushikeshvartak]

Direct Send is not supported by product

[SS]

Just to confirm @rushikeshvartak can we set 'SMTP Authentication' attribute value as 'False' and try sending emails from EIC without a username and password?

[rushikeshvartak]

You can test but username password are mandatory

[SS]

@rushikeshvartak I am still not clear about the answer. Does the attribute ''SMTP Authentication' take FALSE/False as a value? The documentation does not clearly state about all the possible values for the SMTP settings. It just mentions Enter 'TRUE' as the value for attributes like 'Enable SMTP TLS ' and 'SMTP TLS Required'. Is 'Ture' is the only value for these two attributes? What is achieved by these two parameters? Please explain in detail. Customer has port 25 enabled, which is unencrypted email server. Is sending emails over port 25 supported in EIC?

[rushikeshvartak]

1. SMTP Authentication and its possible values: Generally, SMTP Authentication can take on boolean values, meaning it can be either True or False. In some systems or configurations, you might see it represented as "TRUE" or "FALSE" in uppercase, or "true" and "false" in lowercase. It essentially determines whether your email client or application needs to provide login credentials (such as username and password) to the SMTP server when sending emails. If set to False, authentication is not required, but if set to True, it means authentication is necessary for sending emails through that server.

2. Values for 'Enable SMTP TLS' and 'SMTP TLS Required': Typically, these settings also accept boolean values. Enabling SMTP TLS (Transport Layer Security) encrypts the communication between your email client/application and the SMTP server. It adds a layer of security to prevent eavesdropping and tampering of emails while in transit. If 'SMTP TLS Required' is set to True, it means that the server mandates TLS encryption for all communications, and if it's set to False, TLS encryption is optional.

3. Sending emails over port 25: Port 25 is the default port for SMTP communication. However, in modern email systems, sending emails over port 25 without encryption (TLS) is discouraged due to security concerns. Many email servers might reject emails sent over unencrypted connections or mark them as spam. In your case, if port 25 is enabled but unencrypted, it's important to understand that it poses security risks, especially for transmitting sensitive information.