Initial release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3617422,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3617422,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3617422,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3617422,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3617422,"resolution":"1","location":"assets","locale":"","width":1300,"height":666},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3617422,"resolution":"2","location":"assets","locale":"","width":1285,"height":642},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3617422,"resolution":"3","location":"assets","locale":"","width":1289,"height":905},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3617422,"resolution":"4","location":"assets","locale":"","width":1283,"height":383}},"screenshots":{"1":"General tab \u2014 enable mailer, From Email\/Name with force override.","2":"OAuth 2.0 tab \u2014 Azure credentials, redirect URI with copy button, connection status and authorize button.","3":"Test Email tab \u2014 one-click test with full SMTP debug transcript.","4":"Email Log tab \u2014 recent sends with status badges and error details."}},"plugin_section":[],"plugin_tags":[267,186633,2061,36368,6696],"plugin_category":[38,41],"plugin_contributors":[272670],"plugin_business_model":[],"class_list":["post-336935","plugin","type-plugin","status-publish","hentry","plugin_tags-email","plugin_tags-microsoft-365","plugin_tags-oauth","plugin_tags-outlook","plugin_tags-smtp","plugin_category-authentication","plugin_category-communication","plugin_contributors-dixonem","plugin_committers-dixonem"],"banners":{"banner":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/banner-772x250.png?rev=3617422","banner_2x":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/banner-1544x500.png?rev=3617422","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/icon-128x128.png?rev=3617422","icon_2x":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/icon-256x256.png?rev=3617422","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/screenshot-1.png?rev=3617422","caption":"General tab \u2014 enable mailer, From Email\/Name with force override."},{"src":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/screenshot-2.png?rev=3617422","caption":"OAuth 2.0 tab \u2014 Azure credentials, redirect URI with copy button, connection status and authorize button."},{"src":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/screenshot-3.png?rev=3617422","caption":"Test Email tab \u2014 one-click test with full SMTP debug transcript."},{"src":"https:\/\/ps.w.org\/dixonsmtp-for-outlook-microsoft-365\/assets\/screenshot-4.png?rev=3617422","caption":"Email Log tab \u2014 recent sends with status badges and error details."}],"raw_content":"\n
WordPress' default PHP mail() delivery is frequently blocked or spam-foldered. DixonSMTP for Outlook & Microsoft 365<\/strong> routes every email your site sends (core, WooCommerce, WPForms, Contact Form 7, Gravity Forms, and anything else using 100% free.<\/strong> No premium upsell, no paid tiers, no feature gating.<\/p>\n\n Microsoft has deprecated Basic Authentication<\/strong> for Exchange Online and is progressively disabling password-based SMTP AUTH (new Microsoft 365 tenants have it off by default). OAuth 2.0 (\"Modern Authentication\") is the supported, secure path forward \u2014 which is why this plugin is OAuth-only<\/strong> by design. It implements the full Microsoft identity platform authorization code flow with automatic token refresh, so you sign in once and it keeps working.<\/p>\n\n Works with any plugin that sends mail through You need a (free) app registration in Microsoft Entra ID. One-time setup, about 5 minutes:<\/p>\n\n 1. Register the application<\/strong><\/p>\n\n 2. Collect the IDs<\/strong><\/p>\n\n 3. Create a client secret<\/strong><\/p>\n\n 4. Add API permissions<\/strong><\/p>\n\n 5. Enable SMTP AUTH for the mailbox<\/strong><\/p>\n\n Even with OAuth, Exchange Online requires SMTP AUTH to be allowed for the sending mailbox:<\/p>\n\n 6. Authorize the plugin<\/strong><\/p>\n\n This plugin connects to Microsoft services in order to authenticate and deliver email. No data is sent to the plugin author or any other third party.<\/p>\n\n These services are provided by Microsoft: Terms of Use<\/a>, Privacy Statement<\/a>.<\/p>\n\n\n Host SMTP AUTH is disabled for the tenant or mailbox. Follow step 5 of the OAuth setup above.<\/p><\/dd>\n Your From Email must be the authenticated mailbox itself, or an address that mailbox has Send As<\/em> rights for. Enable \"Force From Address\" and set the From Email to the connected mailbox.<\/p><\/dd>\n Yes \u2014 register the Azure app with support for personal Microsoft accounts<\/em> and set Tenant ID to In your WordPress database, encrypted with AES-256 using a key derived from your site's unique Your REST API permalinks are disabled or blocked. Enable pretty permalinks (Settings \u2192 Permalinks) and make sure Yes. The plugin can be network-activated; each site keeps its own settings, connection and log.<\/p><\/dd>\n\n<\/dl>\n\n\nwp_mail()<\/code>) through Microsoft's SMTP servers \u2014 authenticated, encrypted, and deliverable.<\/p>\n\nWhy OAuth 2.0?<\/h4>\n\n
Features<\/h4>\n\n
\n
WP_DEBUG_LOG<\/code><\/li>\nCompatibility<\/h4>\n\n
wp_mail()<\/code>: WPForms, Contact Form 7, Gravity Forms, Ninja Forms, WooCommerce, Easy Digital Downloads, membership and newsletter plugins, etc.<\/p>\n\nMicrosoft 365 \/ Azure OAuth Setup<\/h3>\n\n
\n
WordPress SMTP<\/code>.<\/li>\n\n
common<\/code> in the plugin).<\/li>\n<\/ul><\/li>\nhttps:\/\/your-site.com\/wp-json\/dxn-outlook\/v1\/callback<\/code>).<\/li>\n\n
\n
\n
SMTP.Send<\/code> appears there in your tenant).<\/li>\noffline_access<\/code>, openid<\/code>, profile<\/code>, email<\/code> are requested automatically at sign-in; no admin action usually needed. If your tenant requires it, click Grant admin consent<\/strong>.<\/li>\n<\/ol>\n\n\n
Set-CASMailbox -Identity user@domain.com -SmtpClientAuthenticationDisabled $false<\/code><\/li>\n<\/ul>\n\n\n
External Services<\/h3>\n\n
\n
login.microsoftonline.com<\/code>) \u2014 used for OAuth 2.0 sign-in and token refresh. Sends your Azure app Client ID, Client Secret, authorization codes and refresh tokens. Contacted when you click \"Sign in with Microsoft\" and automatically before sending when the access token needs refreshing.<\/li>\nsmtp.office365.com<\/code> or the host you configure) \u2014 used to deliver email. Sends the email content, sender and recipient addresses, and an OAuth access token for authentication. Contacted on every outgoing email.<\/li>\n<\/ul>\n\n\n
dixonsmtp-for-outlook-microsoft-365<\/code> folder to \/wp-content\/plugins\/<\/code>, or install the ZIP via Plugins \u2192 Add New \u2192 Upload Plugin.<\/li>\n\n
Which SMTP settings do I use for Microsoft 365?<\/h3><\/dt>\n
smtp.office365.com<\/code>, port 587<\/code>, encryption TLS<\/code>. These are the plugin defaults.<\/p><\/dd>\nI get \"5.7.139 Authentication unsuccessful, SmtpClientAuthentication is disabled\"<\/h3><\/dt>\n
I get \"5.7.60 Client does not have permissions to send as this sender\"<\/h3><\/dt>\n
Does this work with personal Outlook.com accounts?<\/h3><\/dt>\n
common<\/code>. Host stays smtp.office365.com<\/code> (or smtp-mail.outlook.com<\/code>).<\/p><\/dd>\nWhere are my credentials stored?<\/h3><\/dt>\n
AUTH_KEY<\/code>\/SECURE_AUTH_KEY<\/code> salts. Nothing is sent to any third party except Microsoft's own OAuth\/SMTP endpoints.<\/p><\/dd>\nThe OAuth redirect returns a 404<\/h3><\/dt>\n
\/wp-json\/<\/code> is reachable, then re-copy the Redirect URI.<\/p><\/dd>\nIs Multisite supported?<\/h3><\/dt>\n
1.0.0<\/h4>\n\n
\n