If you have an EchoMark Business or Enterprise account, you'll want to take advantage of EchoMark's email integration to protect your private mail and attachments automatically. This guide will get you set up to watermark your emails.
1. Configure an inbound connector
First, use the following guide to configure an inbound connector:
Configure EchoMark Connectors in Microsoft Exchange
2. Register an application in Microsoft Entra
In order for EchoMark to access Microsoft Graph API to expand groups in Exchange, you will need to register an application as an administrator in your tenant and configure it with the proper access. This is important for using the mail feature in the EchoMark app and for SecureView group membership validation.
After registering the application, make a note of the following on the Overview:
- Application (client) ID
- Directory (tenant) ID
Then, configure the following:
- Navigate to API Permissions
- Click Add a Permission
- Select Microsoft Graph
- Click Application permissions
- Select GroupMember.Read.All and User.Read.All
- If you would like more restrictive permissions, you can use User.ReadBasic.All but this will prevent EchoMark from supporting user aliases in access control lists for SecureView and Collection links.
- Click Add permissions
- At the top of the permissions table, click Grant admin consent to grant consent for all new permissions
- Navigate to Certificates and secrets
- Select Client secrets
- Click New client secret
- Enter a name, e.g. "EchoMark client secret"
- Update Expires to 730 days (24 months)
- Click Add
- Save the Value of the secret (you won't be able to access this again)
3. Update your DNS settings
Next, update the DNS settings for each of the domains that you want EchoMark to work with. This helps us to verify your domains, and it also prevents messages routed through EchoMark from appearing as spam. Note that updated DNS settings could take up to 48 hours to propagate, but usually finish propagating in about 5-10 minutes.
4. Contact EchoMark
Next, reach out to your EchoMark representative to finish the account configuration on the EchoMark side. This step includes enumerating the email domains for email integration and configuring the graph API integration.
5. Define the Outbound Connector
Configure your outbound connector as outlined in step 3 below:
Configure EchoMark Connectors in Microsoft Exchange
6. Define a mail flow rule
Once your integration has been successfully verified, move on to enable automatic marking.