Actionable Email Setup
Antidote can send emails that include clickable action buttons, such as Approve, Reject, or View Details, so you can act directly from your inbox instead of opening a separate page. Microsoft calls this feature "Actionable Messages."
Microsoft 365 does not allow senders to include action buttons in email by default. Each sender must register with Microsoft, and each receiving organization must separately approve that sender before its users see interactive buttons rather than plain links. This guide walks your Microsoft 365 administrator through granting that approval for Antidote.
This approval only affects emails sent from Antidote. It does not change how any other sender's email behaves, and it does not grant Antidote any access to your mailboxes, data, or systems.
Who should complete this guide
Whoever holds the Exchange Administrator or Global Administrator role for your Microsoft 365 tenant. See How do I check my admin role? below if you're not sure.
Before you start
You'll need:
- Your normal Microsoft 365 admin sign-in.
- About 10 minutes, plus up to 24 hours afterward for the change to take effect.
You are not creating any accounts, installing any software, or agreeing to any cost. This is a one-time approval inside a Microsoft settings page.
Step-by-step instructions
Step 1: Sign in to Outlook on the web first
Before opening the dashboard in the next step, open a browser tab and go to outlook.office.com/mail. Sign in with your Microsoft 365 admin account if it doesn't sign you in automatically, then leave this tab open.
This avoids a known issue where the next page fails to load if you haven't signed in to Outlook first.
Step 2: Open the Actionable Email Developer Dashboard
In a new browser tab, go to aka.ms/ActionableMessagesPortal. This is an official Microsoft page and should recognize that you're already signed in from step 1.
Step 3: Start a new registration
Click New Provider (Microsoft occasionally renames this button, so look for wording like "New submission" or "Register" if it isn't there).
Step 4: Fill in the provider information
In the Provider Information section, enter or select the following:
| Field | Value |
|---|---|
| Provider Name | Antidote |
| Is this a Power Automate Scenario? | No |
| Microsoft Entra App ID | fd9b7007-8155-483c-866c-71660565a4b2 |
| Token Type | AAD-OBO |
| Scope | Organization |
Further down the form, enter:
| Field | Value |
|---|---|
| Sender email address | [email protected] |
| Target URL(s) | Ask your Antidote contact for the value(s) to enter here. |
Tenant ID and Provider ID (Originator) fill in automatically and are read-only. You don't need to enter anything in these fields, but copy both values and send them to your Antidote representative — Antidote must authorize them before actionable email will work for your organization.
Do not choose Test Users or Global for Scope:
- Test Users - only enables actionable email for a couple of specific mailboxes, which is narrower than what's needed here.
- Organization - the correct choice. It enables actionable email for everyone in your Microsoft 365 organization and routes the request to you, as an Exchange or Global admin, for approval.
- Global - would enable Antidote's actionable email for every Microsoft 365 customer, not just your organization. This requires a separate Microsoft review process and isn't what's being requested here.
Leave any other field blank unless it's marked required. If a required field asks for something not listed above, contact your Antidote representative before continuing rather than guessing.
Step 5: Submit the form
Double-check everything you entered, then click Submit.
Wait for confirmation from Antidote that the Tenant ID and Provider ID (Originator) have been authorized before continuing to the next step. Submitting before that confirmation won't cause an error, but the integration won't function until Antidote has completed this on their end.
Step 6: Approve the request
Because you chose the Organization scope, and you are the Exchange or Global admin, the request now needs your approval. Depending on how the portal is set up, this happens one of two ways:
- You're prompted to approve immediately in the same session, or
- You receive a notification, either in the portal or by email to your admin account, asking you to review the pending request.
Either way, review the sender details one more time, then click Approve.
Step 7: Grant admin consent
Go to the following URL, substituting {tenant} with the Tenant ID you provided to Antidote in step 4:
https://login.microsoftonline.com/{tenant}/adminconsent?client_id=fd9b7007-8155-483c-866c-71660565a4b2
Sign in with your Microsoft 365 admin account if prompted, review the permissions requested, and click Approve.
Step 8: Wait up to 24 hours
Once approved, Microsoft needs up to 24 hours for the change to take effect across your organization. You don't need to do anything during this time.
How to confirm it worked
- Wait at least 24 hours after completing step 7.
- Ask your Antidote contact to send a test actionable email to your own mailbox.
- Open the email in Outlook, either on the web or desktop. You should see clickable buttons directly in the message body rather than a plain link.
If you don't see any buttons after 24+ hours, see Troubleshooting below before assuming something is wrong.
Troubleshooting
Buttons show up in Outlook on the web but not in Outlook desktop
Check the following:
- Under File > Options > Advanced, your Send/Receive settings should be set to download full items rather than headers only.
- Make sure no screen reader is active. Outlook disables this feature when one is detected.
This is a known, documented Microsoft behavior, not a sign that something is misconfigured.
It's been more than 24 hours and it's still not working
Check the following first:
- Confirm your organization hasn't disabled this feature entirely. Your Exchange team can check this by running
Get-OrganizationConfig | Select ConnectorsActionableMessagesEnabled, which should returnTrue. - If you use an email security or filtering product, such as Mimecast, it can sometimes strip the special formatting these emails need. If so, that product may need
schema.orgadded to its exception or allow list.
If both of those check out and it's still not working, contact your Antidote representative, who can escalate to Microsoft using Antidote's Entra Application ID.
How do I check my admin role?
If you're not sure whether you hold the Exchange Administrator or Global Administrator role:
- Go to the Microsoft 365 admin center.
- Go to Users > Active users, click your own name, and look at the Roles section. It lists any admin roles assigned to you.
Is this safe? What am I actually agreeing to?
You're telling Microsoft that emails from Antidote's registered sender address, using Antidote's registered target URL, are allowed to show clickable action buttons to people in your organization. It does not grant Antidote any access to your mailboxes, data, or systems. It only affects how Antidote's own emails are displayed, and it does not affect any other sender.
Undoing this later
If you ever want to turn this off, go back to the Actionable Email Developer Dashboard, find Antidote's provider registration, and revoke or remove it.
Alternatively, your Exchange admin can disable actionable email for your whole organization (affecting all senders, not just Antidote) by running:
Set-OrganizationConfig -ConnectorsActionableMessagesEnabled $false