← Close

Connect a Microsoft 365 mailbox FAX Ai

Microsoft 365 no longer allows IMAP with basic authentication, so FAX Ai reads M365 mailboxes through the Microsoft Graph API using an app-only (application) registration. This is a one-time setup done by a Microsoft 365 / Azure AD administrator.

You will need Global Administrator (or Application Administrator + the ability to grant admin consent) on the Microsoft 365 tenant.

What you'll end up with

Four values that you paste into the FAX Ai form:

Azure Tenant IDThe directory (tenant) ID of your Microsoft 365 organization.
Client IDThe application (client) ID of the app registration you create.
Client SecretA secret value generated for that app registration.
Mailbox AddressThe mailbox to monitor, e.g. fax@yourdomain.com (a user or shared mailbox).

Step 1 — Create an app registration

  1. Go to the Microsoft Entra admin center (or Azure Portal) → Microsoft Entra ID → App registrations.
  2. Click New registration.
  3. Name it something like VoizGenie FAX Ai.
  4. Under Supported account types choose Accounts in this organizational directory only (Single tenant).
  5. Leave Redirect URI empty and click Register.

On the app's Overview page, copy the Application (client) ID → this is your Client ID, and the Directory (tenant) ID → this is your Azure Tenant ID.

Step 2 — Add the Mail.Read application permission

  1. In the app, open API permissions → Add a permission.
  2. Choose Microsoft Graph → Application permissions (not Delegated).
  3. Search for and select Mail.Read read mail in all mailboxes. Add it.
  4. Click Grant admin consent for <your org> and confirm. The status must show a green check.
Mail.Read is application-wide (it can read any mailbox). To limit the app to just the fax mailbox, apply an Application Access Policy — see Step 5 (recommended).

Step 3 — Create a client secret

  1. Open Certificates & secrets → Client secrets → New client secret.
  2. Add a description and an expiry (e.g. 24 months). Click Add.
  3. Copy the secret's Value immediately (it is only shown once) → this is your Client Secret.
Client secrets expire. Set a calendar reminder to rotate it before the expiry date, or incoming faxes will stop being read.

Step 4 — Pick the mailbox

Decide which mailbox receives the faxes (from your fax-to-email provider). It can be a normal user mailbox or a shared mailbox, e.g. fax@yourdomain.com. Use its full email address as the Mailbox Address.

Step 5 — (Recommended) Restrict the app to one mailbox

By default the app can read every mailbox. To scope it to only the fax mailbox, create a mail-enabled security group containing that mailbox and apply an application access policy in Exchange Online PowerShell:

Step 6 — Enter the values in FAX Ai and test

  1. Back in the VoizGenie panel, open your Fax AI → General tab.
  2. Set Mailbox Authentication to Microsoft 365 (Graph API / OAuth2).
  3. Paste the Azure Tenant ID, Client ID, Client Secret and Mailbox Address.
  4. Set the Folder (usually INBOX) and the Subject keyword that identifies faxes.
  5. Click Test connection. It should list the mailbox folders. Then click Browse mailbox to confirm you can see messages.
When the test succeeds you can save the Fax AI. If it fails, re-check the tenant/client IDs, that the secret hasn't expired, that Mail.Read has admin consent, and that the mailbox address is correct.

Troubleshooting