Merge pull request mendix#6154 from mahendra-mahajan-mendix/patch-17

Update email-connector.md

Author: Johanna Hemminger

content/en/docs/appstore/connectors/email-connector.md

@@ -17,6 +17,7 @@ The Email Connector includes the following features:
 
 * Configuration of multiple email accounts
     * Supports basic authentication and [creating an account with OAuth 2.0](#create-oauth) to configure Microsoft Azure AD accounts.
+        * Supports Authorization Code Flow and Client Credentials Flow.
     * Supports shared mailboxes using basic and OAuth 2.0 authentication.
 * Digital signatures and encryption
 * Email templates
@@ -80,7 +81,9 @@ When you run your app to use this module for the first time, and earlier data is
 2. Choose if you want to either configure the **Primary** account or **Shared Mailbox**.
 3. Choose the protocols for sending and receiving emails.
 
-You can add and configure an email account in the Email Connector using basic authentication and OAuth 2.0 for Microsoft Azure AD accounts. You can also add and configure "Shared Mailbox" using Basic & OAuth 2.0 authentitcation. To configure OAuth 2.0 accounts, see [Creating an Account Using Microsoft Azure OAuth 2.0](#create-oauth). The account configuration wizard supports automatic and manual configurations for Sending and Receiving emails.
+You can add and configure an email account in the Email Connector using basic authentication and OAuth 2.0 for Microsoft Azure AD accounts. You can also add and configure "Shared Mailbox" using Basic and OAuth 2.0 authentication, or using the Authorization Code Flow or the Client Credentials Flow.
+
+To configure OAuth 2.0 accounts, see [Creating an Account Using Microsoft Azure OAuth 2.0](#create-oauth). The account configuration wizard supports automatic and manual configurations for Sending and Receiving emails.
 
 {{% alert color="info" %}}
 You can configure either your primary email account or shared mailbox in the wizard, but not both (primary and shared) at the same time. To add a primary and a shared mailbox, go through the wizard twice; first to configure your primary account, and then to configure the shared mailbox. You can choose to only configure a shared mailbox, although your primary email account is needed to configure it.
@@ -254,22 +257,40 @@ If no email accounts are configured then you can create new OAuth configutation
 
 #### 4.7.1 OAuth Provider Configuration Details {#oauth-config-details}
 
-To configure OAuth provider, the following details are required:
+To configure OAuth provider for the Authentication Code Flow, the following details are required:
 
 * **Client ID** – available on the [Azure portal](https://portal.azure.com/) once you have registered your app
 * **Client Secret** – available on the [Azure portal](https://portal.azure.com/) once you have registered your app
-* **Callback operation path** – enter any string, based on which the callback URL will be auto-generated
+* **Callback Path** – enter any string, based on which the callback URL will be auto-generated
 * **Callback URL** – the URL where the OAuth provider will redirect with the authorization code, and configured on Azure portal as callback/redirect URI
 
-#### 4.7.2 Settings in the Microsoft Azure Portal
+To configure OAuth provider for Client Credential code grant flow, the following details are required:
+* **Client ID** – available on the [Azure portal](https://portal.azure.com/) once you have registered your app
+* **Client Secret** – available on the [Azure portal](https://portal.azure.com/) once you have registered your app
+* **Tenant ID** – available on the [Azure portal](https://portal.azure.com/) once you have registered your app
+ 
+#### 4.7.2 Settings in the Microsoft Azure Portal (Authentication Code Flow)
 
 To register your app in the Azure Portal, follow Microsoft's Tutorial [Register an app with Azure Active Directory](https://docs.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-register-app-azure-active-directory). While registering, set the redirect/callback URI as **Callback URL** mentioned while configuring [OAuth Provider Configuration Details](#oauth-config-details).
 
 This connector contains functionality of sending and receiving emails, so during the OAuth process the connector will ask for permissions for sending and receiving email.
 
 On the [Azure portal](https://portal.azure.com/), ensure that you have the following permissions enabled under **API permissions** tab on the sidebar:
 
-{{< figure src="/attachments/appstore/connectors/email-connector/app_permissions.png" >}}
+{{< figure src="/attachments/appstore/connectors/email-connector/app-permissions.png" >}}
+
+#### 4.7.3 Settings in the Microsoft Azure Portal (Client Credentials Flow)
+
+To register your app in the Azure Portal, follow Microsoft's [Register an app with Azure Active Directory](https://docs.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-register-app-azure-active-directory).
+
+This connector contains functionality of sending and receiving emails, so Office 365 Exchange Online related APIs need to be given permission along with Admin consent.
+
+* On the [Azure portal](https://portal.azure.com/), ensure that you have the following permissions enabled under **API permissions** tab on the sidebar:
+
+{{< figure src="/attachments/appstore/connectors/email-connector/client-cred-api-permissions.png" >}}
+
+* Admin status is given on the added API permissions.
+* Tenant admin must register the Azure application's service principal in Exchange via Exchange Online PowerShell. Follow the steps in [Register service principals in Exchange](https://learn.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth#register-service-principals-in-exchange).
 
 ### 4.8 Queuing Emails