How to Configure SCOM 2025 Email Alerts with Microsoft Graph or SMTP OAuth (SMTP AUTH Deprecation)

Hi all,

I'm just getting started with SCOM 2025 and need help configuring email notifications to use modern authentication. I understand that SMTP AUTH is being deprecated by Microsoft in April 2026, so I want to set up either:

1. Microsoft Graph API for sending alerts
2. Or SMTP with OAuth 2.0 (e.g., via Office 365)

I haven’t done any configuration yet—just looking for clear guidance on how to get started. Specifically:

• What steps are needed to register an app in Entra ID (Azure AD) to support this?
• What permissions should the app have (e.g., Mail.Send)?
• How do I configure the notification channel in SCOM to use OAuth?
• Is Microsoft Graph supported directly in SCOM 2025, or is SMTP with OAuth the only option?
• Do I need to manually generate tokens, or does SCOM handle that automatically once the app is registered?

Any documentation, walkthroughs, or examples would be hugely appreciated. Thanks in advance!