Skip to main content

​
What you’ll accomplish

By the end of this guide you’ll have:
  • A Microsoft 365 tenant connected to TenantCore
  • At least one domain attached and DNS records generated
  • Sending mailboxes provisioned with enforced send limits
  • Mailbox credentials ready for your sending tool

​
Step 1 — Connect your tenant

  1. Open the TenantCore app and go to Tenants
  2. Click Connect Tenant
  3. Enter your Microsoft 365 Global Administrator credentials
  4. TenantCore will authenticate, configure Exchange Online, and register the tenant — this takes under 60 seconds
Once connected, the tenant appears in your dashboard with a status of Active.

​
Step 2 — Add a domain

  1. Open the Domains page and go to Add Domain
  2. Click Add Domain
  3. Choose your tenant
  4. Enter your custom domain (e.g. tryacme.com)
  5. TenantCore will generate your DNS records and enable DKIM — copy them to your registrar

​
DNS records to add

TenantCore generates the following records per domain:
TypeNamePurpose
MX@Routes inbound mail through Microsoft
TXT@Microsoft domain verification (MS=xxxxxxxx)
TXT@SPF — authorizes Microsoft to send on behalf of the domain
TXT_dmarcDMARC — defines policy for failed authentication
CNAMEselector1._domainkeyDKIM selector 1 — cryptographic signing key
CNAMEselector2._domainkeyDKIM selector 2 — cryptographic signing key
CNAMEautodiscoverOutlook client autodiscovery
CNAMEenterpriseenrollmentMicrosoft device enrollment
CNAMEenterpriseregistrationMicrosoft device registration
Add all records at your registrar before proceeding. DNS propagation typically takes 15 to 30 minutes, though it can take up to 48 hours in rare cases.
autodiscover, enterpriseenrollment, and enterpriseregistration are standard Microsoft 365 records generated as part of the full domain verification process. They are not mail-specific and have no effect on sending. You will see them in TenantCore alongside your mail records — add them all the same way.
Do not provision mailboxes before DNS records have propagated. Microsoft will reject mail from domains without valid MX and SPF records.

​
Step 3 — Provision mailboxes

  1. Once your domain has been added Successfully, go to Mailboxes
  2. Click Add Mailboxes
  3. Select your tenant
  4. Add your mailbox name slot. The names added will be used across your domains
  5. Select your domain and add a password that will be attached to each email.
  6. Click Review & Provision
TenantCore provisions each mailbox as a shared mailbox in Exchange Online. Provisioning takes 1–3 minutes per domain.

​
Step 4 — Retrieve Mailbox credentials

Once mailboxes are provisioned, each one has the same password set in the previous step. Retrieve credentials from the Mailboxes page in the app under the Password column. These are the credentials you enter into Smartlead, Instantly, or whichever sequencer you use.
For security, passwords are removed from the display after 24 hours. Please store your passwords appropriately. The password itself remains active on the mailbox, and your sequencer connections will continue to work.

​
Step 5 — Set send limit enforcement

Send limit enforcement is not applied automatically when mailboxes are provisioned. It is an opt-in step that must be configured separately after mailboxes are created. Enforcement is set at the domain level through the Set Global Limit button on your dashboard.
  1. From the dashboard, click Set Global Limit
  2. Select the tenant you want to apply enforcement to
  3. Select the domain or domains you want to enforce — or select All domains to apply tenant-wide
  4. Set your daily send limit using the slider or input field (maximum 25 emails per mailbox per day)
  5. Click Apply Limit
TenantCore will provision a security group and transport rule in Exchange Online for each selected domain. Mailboxes that exceed the limit will have outbound mail rejected by Exchange until the next reset window.
Enforcement must be set per domain. If you add a new domain after setting a global limit, you will need to run through this flow again for that domain. Existing domains are not affected.
Until enforcement is set, your mailboxes have no send ceiling at the Exchange level. Your sequencer’s own sending limits are the only thing controlling volume. In a shared tenant environment, it is highly recomemnded to set enforcement before launching any campaigns.

​
Step 6 — Connect to your sending tool

Add each mailbox to your sequencer using the Mailbox credentials. TenantCore does not connect to your sequencer directly. See the integration guides for sequencer-specific setup:

Smartlead

Add TenantCore mailboxes to Smartlead

Instantly

Add TenantCore mailboxes to Instantly

​
You’re live

Your infrastructure is provisioned and enforced and you can begin sending.