Skip to main content

Direct Message Injection (DMI) for Microsoft 365/Entra

Deliver revel8 simulations straight into Outlook mailboxes with Direct Message Injection, instead of whitelisting sending domains.

ℹ️ Info
Part of the Getting Started guide, Step 2. Ensure deliverability.

Direct Message Injection (DMI) places revel8 simulations straight into your users' mailboxes and bypasses mail filtering, so you do not need to whitelist any sending domains. For Outlook, you connect revel8 to your Microsoft tenant and grant it permission to insert emails.

⚠️ Warning
DMI replaces sending-domain whitelisting only. Simulation landing pages still have to be allowed through your web filter, see Outbound URL Whitelisting in Microsoft Defender for Endpoint.

Before you begin

Have these ready:

  • Admin access to revel8.

  • A Microsoft Entra admin who can grant admin consent for your organization. If that is not you, step 3 covers sending them a link.

1. Open Outlook DMI

In revel8, open Settings → Mail Delivery (in Integrations) and select the Outlook DMI tab.

The revel8 Mail Delivery page with the Outlook DMI tab selected, showing the two setup steps and the Direct message injection status

2. Connect revel8 to your Microsoft tenant

Under step 1, Connected revel8 to Microsoft tenant, click Connect to Microsoft and sign in with your Microsoft account.

When it succeeds, the box turns green and shows your Tenant ID. To connect again later, click Re-connect to Microsoft.

3. Grant revel8 the permissions

Step 2 then shows a Consent link. What you do next depends on your Microsoft role:

  • You are a Microsoft admin: click Grant permissions. Microsoft lists the permissions revel8 requests. Click Accept.

  • You are not a Microsoft admin: click Copy link and send it to a Microsoft Entra admin, who opens it and accepts on behalf of your organization.

The revel8 Outlook DMI tab showing the consent link with the Grant permissions and Copy link buttons

4. Activate direct message injection

Once the tenant is connected and the permissions are granted, click Activate direct message injection at the bottom of the tab. Direct message injection status changes from Inactive to Active.

What revel8 can access

The consent gives revel8 two Microsoft Graph permissions:

  • User.ReadBasic.All reads basic user profiles, so revel8 can address the right mailboxes.

  • Mail.ReadWrite places simulation emails into those mailboxes.

Did this answer your question?