Microsoft/Office 365 SMTP

Hello, has anyone succeed in using Microsoft 365 as SMTP host for the automated emails like password recovery?
I'm following the following guide to configure it Microsoft side but.. big nope
https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365

what did you use for the values (exclusing user and pass) and what's the error you're getting?

host: smtp.office365.com
port: 587
use TLS: true

user: an actual mailbox
password: an App Password created from the user

I don't get errors from Appwrite (Cloud) but simply I don't receive emails.
I don't even see login tentatives in the "Microsoft Entra admin center"

found it:
I needed to allow legacy/basic authentication for the organization in order to use App Passwords for SMTP

https://learn.microsoft.com/en-gb/azure/active-directory/fundamentals/security-defaults

Now the question is: using Cloud, which is the server IP(s?) that are used to send?

I need to properly set the spf record to do not mark AW emails as SPAM

that is a good question...let me check with the team

Any news on the topic?

https://tenor.com/view/%E7%9A%849-gif-27299608

Sorry, it's been hectic. Let me follow up with the team

Hmm I don't think we'll be able to publicize that info...perhaps adding some SPF record that says Microsoft/office365 is sending the email might be enough?

Uhm, actually as we're using SMTP AUTH it may be enough but this does not explain why it gets to the SPAM folder.
I'm sending from an M365 configured domain to another M365 configured domain and the SPF is a pass looking the email's header but still it gets to the SPAM folder... need to look into that more deeper

thank you Microsoft for such detail 🙃

well, mail-tester.com gives a (good) score as 9/10 so it's some stupid Microsoft rule that marks it as SPAM.

An info that it's worth checking, as is the reason for the -1 point, is that there are 2 broken links in the base template:
https://github.com/appwrite/appwrite/blob/49155a97d42a152f26e188a3910548bc209785d8/app/config/locale/templates/email-base.tpl#L5

the two Google links marked as preconnect are giving 404 and that's seen as a problem by the antispam

https://github.com/appwrite/appwrite/issues/6357

I believe that this Discord ticket can be marked as solved!

maybe there's something about DMARC or DKIM too? 🤷🏼‍♂️ this type of stuff is really cryptic and annoying