Connect email account (oauth 2.0)

A user connects their corporate email (Google Workspace or Microsoft 365) to the CRM via OAuth 2.0 to enable email sync and send-from-CRM.

When this happens: You go to Settings — Email Integration — Connect Account.

Step by step

  1. 1

    Go to Settings — Email Integration.

    EasyCRM shows available providers: Google Workspace, Microsoft 365 (only those configured by Admin).

  2. 2

    Select Microsoft 365.

    EasyCRM takes you to Microsoft OAuth 2.0 consent screen with requested scopes: read/send email, contacts (read-only).

  3. 3

    Signs in at the provider's login page. Grants consent.

  4. 4

    Redirects back to CRM with authorization code.

    Exchanges authorization code for access token + refresh token. EasyCRM stores tokens encrypted (AES-256). EasyCRM verifies connection by fetching the user's email profile. EasyCRM shows: Connected as user@company.com Initiates initial sync: imports emails from the last 30 days.

Other paths

Reconnect after token expiry

Background sync fails due to expired refresh token. Sets connection status to Requires Re-authentication Notification: Your email connection needs re-authentication Click Reconnect — repeats steps 4–8.

Disconnect email account

Click Disconnect Confirmation: Disconnect email? Synced emails will remain, but new syncing will stop Revokes tokens. Stops background sync. Status: Not connected

If something goes wrong

User denies oauth consent

Returns access_denied error. EasyCRM shows: Email connection was not authorized. Please try again and grant the required permissions

Admin has not configured provider

No providers configured. EasyCRM shows: Email integration is not yet configured. Please contact your administrator

Good to know

  • OAuth tokens are encrypted at rest (AES-256).
  • The CRM never stores the your email password.
  • Supported providers: Google Workspace (Gmail API) and Microsoft 365 (Graph API).
  • Initial sync imports the last 30 days of email.