> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tenantcore.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Quickstart

> Connect a Microsoft 365 tenant and provision your first sending mailboxes in under 10 minutes.

## What you'll accomplish

By the end of this guide you'll have:

* A Microsoft 365 tenant connected to TenantCore
* At least one domain attached and DNS records generated
* Sending mailboxes provisioned with enforced send limits
* Mailbox credentials ready for your sending tool

***

## Step 1 — Connect your tenant

1. Open the [TenantCore app](https://app.tenantcore.io) and go to **Tenants**
2. Click **Connect Tenant**
3. Enter your Microsoft 365 Global Administrator credentials
4. TenantCore will authenticate, configure Exchange Online, and register the tenant — this takes under 60 seconds

Once connected, the tenant appears in your dashboard with a status of **Active**.

***

## Step 2 — Add a domain

1. Open the **Domains** page and go to **Add Domain**
2. Click **Add Domain**
3. Choose your tenant
4. Enter your custom domain (e.g. `tryacme.com`)
5. TenantCore will generate your DNS records and enable DKIM — copy them to your registrar

### DNS records to add

TenantCore generates the following records per domain:

| Type  | Name                   | Purpose                                                    |
| ----- | ---------------------- | ---------------------------------------------------------- |
| MX    | @                      | Routes inbound mail through Microsoft                      |
| TXT   | @                      | Microsoft domain verification (MS=xxxxxxxx)                |
| TXT   | @                      | SPF — authorizes Microsoft to send on behalf of the domain |
| TXT   | \_dmarc                | DMARC — defines policy for failed authentication           |
| CNAME | selector1.\_domainkey  | DKIM selector 1 — cryptographic signing key                |
| CNAME | selector2.\_domainkey  | DKIM selector 2 — cryptographic signing key                |
| CNAME | autodiscover           | Outlook client autodiscovery                               |
| CNAME | enterpriseenrollment   | Microsoft device enrollment                                |
| CNAME | enterpriseregistration | Microsoft device registration                              |

Add all records at your registrar before proceeding. DNS propagation typically takes 15 to 30 minutes, though it can take up to 48 hours in rare cases.

<Note>
  `autodiscover`, `enterpriseenrollment`, and `enterpriseregistration` are standard Microsoft 365 records generated as part of the full domain verification process. They are not mail-specific and have no effect on sending. You will see them in TenantCore alongside your mail records — add them all the same way.
</Note>

<Warning>
  Do not provision mailboxes before DNS records have propagated. Microsoft will reject mail from domains without valid MX and SPF records.
</Warning>

## Step 3 — Provision mailboxes

1. Once your domain has been added **Successfully**, go to **Mailboxes**
2. Click **Add Mailboxes**
3. Select your tenant
4. Add your mailbox name slot. The names added will be used across your domains
5. Select your domain and add a password that will be attached to each email.
6. Click **Review & Provision**

TenantCore provisions each mailbox as a shared mailbox in Exchange Online. Provisioning takes 1–3 minutes per domain.

***

## Step 4 — Retrieve Mailbox credentials

Once mailboxes are provisioned, each one has the same password set in the previous step.

Retrieve credentials from the **Mailboxes** page in the app under the **Password** column. These are the credentials you enter into Smartlead, Instantly, or whichever sequencer you use.

<Note>
  For security, passwords are removed from the display after 24 hours. Please store your passwords appropriately. The password itself remains active on the mailbox, and your sequencer connections will continue to work.
</Note>

***

## Step 5 — Set send limit enforcement

Send limit enforcement is not applied automatically when mailboxes are provisioned. It is an opt-in step that must be configured separately after mailboxes are created.

Enforcement is set at the domain level through the **Set Global Limit** button on your dashboard.

1. From the dashboard, click **Set Global Limit**
2. Select the tenant you want to apply enforcement to
3. Select the domain or domains you want to enforce — or select **All domains** to apply tenant-wide
4. Set your daily send limit using the slider or input field (maximum 25 emails per mailbox per day)
5. Click **Apply Limit**

TenantCore will provision a security group and transport rule in Exchange Online for each selected domain. Mailboxes that exceed the limit will have outbound mail rejected by Exchange until the next reset window.

<Note>
  Enforcement must be set per domain. If you add a new domain after setting a global limit, you will need to run through this flow again for that domain. Existing domains are not affected.
</Note>

<Warning>
  Until enforcement is set, your mailboxes have no send ceiling at the Exchange level. Your sequencer's own sending limits are the only thing controlling volume. In a shared tenant environment, it is highly recomemnded to set enforcement before launching any campaigns.
</Warning>

***

## Step 6 — Connect to your sending tool

Add each mailbox to your sequencer using the Mailbox credentials. TenantCore does not connect to your sequencer directly.

See the integration guides for sequencer-specific setup:

<CardGroup cols={2}>
  <Card title="Smartlead" icon="paper-plane" href="/guides/connecting-to-smartlead">
    Add TenantCore mailboxes to Smartlead
  </Card>

  <Card title="Instantly" icon="bolt" href="/guides/connecting-to-instantly">
    Add TenantCore mailboxes to Instantly
  </Card>
</CardGroup>

***

## You're live

Your infrastructure is provisioned and enforced and you can begin sending.