Email Configuration
From Admin → Email, configure how your organization sends its transactional emails. Four backends are available:
- SMTP — server (host/port), credentials, and security (none / STARTTLS / SSL).
- Microsoft Graph — sends via the Graph API, reusing the credentials of the already-configured Azure application (tenant/client/secret); requires the
Mail.Sendapplication permission and an authorized sender address (UPN). - AWS SES — region, access key and secret key (leave blank to use the default IAM credential chain if the infrastructure is already authorized).
- Generic HTTP API — provider (SendGrid, Brevo, Resend or Mailgun), API key, and a base URL (only required for Mailgun).
Fields common to all backends: enable sending, sender address and display name.
A "Send test" button sends a real email with the current configuration, even if sending isn't enabled yet — useful for validating the configuration before actually turning it on.
Automatic triggers
- Welcome email — when a user is created with an email address provided.
- Password reset — on user request, only for local accounts (an account connected exclusively via Azure AD SSO has no password to reset).
- Job completion — for users who enabled this notification in their profile, regardless of the final status (completed, failed, blocked).
Automatically triggered emails are sent asynchronously (in the background); only the test email is sent synchronously, to immediately surface a configuration error on screen.