SMTP Mail Destination Configuration with OAuth2ClientCredentials

[michabaer]

Hello all,

I would like to set up the email functionality for SAP Build Process Automation.

There are two ways how to set up the mail destination. Either with BasicAuthentication or OAuth2Password.
see Configure an SMTP Mail Destination | SAP Help Portal
But as long as you need the user and password for both methods, is it a secured approach?
Also many internet blogs describe to avoid these authentication methods in general.
However, the OAuth2ClientCredentials method is the one that companies are asking for.
Are there any ways to use this method?

Thank you very much for your help and best regards!

[Archana]

Hello @michabaer,

OAuth2Password is meant for the same where you do not have to specify the user name and password and it works with client ID and secret. It is secure to use it, and we implemented this because most of mail provider like Microsoft Outlook were discouraging the use of Basic Auth. You can read more about the OAuth grant flow in different provider websites. Hope that helps! 

[michabaer]

Hello @Archana 

Thank you for this fast answer!

As I understand your message, it is possible to do it without username and password.
Sadly the fields are required for the Destination:

And using the Authentication method OAuth2ClientCredentials is not supported by SPA.

Do we need to deactivate it on provider site and enter some fake values into the username and password field of the destination?

Thanks for your help!