Google as SMTP server (with OAuth)

[matthias_bretz]

Hi,

so in a couple of weeks Google will shut down basic auth for gmail SMTP (Transition from less secure apps to OAuth ).

As this is how we (and probably many other Jamf Pro customers) set up our Jamf Pro in the cloud to send us notification mails, we are now strugeling to find a way for the future.

Has anyone (without an other mail server besides Google) found a solution jet?

Or has anyone heard of OAuth support for Jamf Pro smtp settings?

Kind regards, Matthias

[jamf-42]

join the JAMF Pro betas... via feedback in your JAMF ID  account.. more info there.. 

[karansingh1]

Hi Matthias,

The transition to OAuth for Gmail SMTP is challenging for Jamf Pro users, as Jamf currently doesn't support OAuth for SMTP settings. Possible solutions include using a third-party SMTP service like SendGrid or Mailgun, setting up a G Suite SMTP relay, or exploring custom OAuth workflows. These options can help maintain email notifications. I recommend testing these alternatives now to ensure a smooth transition. Additionally, keep an eye on Jamf’s updates, as they might introduce OAuth support in the future.

Kind regards,
Karan

[jamf-42 · Accepted solution]

and 11.9 is out:

You can now integrate Google-hosted email accounts with Jamf Pro using Google Cloud's Identity and Access Management system. Beginning 30 September 2024, Google will require OAuth 2.0 for third-party apps to access Gmail, meaning that adding Gmail accounts via basic authentication will no longer be supported in Jamf Pro. This feature allows you to integrate a Gmail account with Jamf Pro by authenticating directly through Google via OAuth 2.0, enabling Jamf Pro to securely authenticate when sending email notifications for various actions that take place in your environment.

To access this feature in Jamf Pro, navigate to Settings > System > SMTP server, and select "Google Auth" from the Authentication method pop-up menu.

For more information on integrating an SMTP server, see SMTP Server Integration in the Jamf Pro Documentation.

[aghali]

Anyone having an issue following this Article to create the unique client ID and client secret in your Google Workspace portal? I can start the process by creating the new project but I don't see the "Product name" field nor where I can select "Web server"!

[user-xhWIUceCkh]

Seems pretty straightforward, but we are getting:

POST https://oauth2.googleapis.com/token
{
"error": "redirect_uri_mismatch",
"error_description": "Bad Request"
}