{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/exchange-online-connector-governance-mail-flow/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/",
        "slug": "exchange-online-connector-governance-mail-flow",
        "url": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/exchange-online-connector-governance-mail-flow/"
        },
        "title": "Give every Exchange Online connector a route owner, test, and retirement date",
        "summary": "Most Exchange Online tenants do not need connectors for ordinary internet mail. Where hybrid servers, applications, devices, or partners do require them, document the exact route, validate both directions, monitor delivery, and remove obsolete paths.",
        "format": {
            "slug": "checklist",
            "name": "Checklist"
        },
        "priority": {
            "slug": "important",
            "name": "Important"
        },
        "featured": false,
        "image": {
            "theme": "identity-cloud",
            "label": "Identity & cloud",
            "alt": "Governed cloud identity system with connected service and lifecycle nodes.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/identity-cloud-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/identity-cloud-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/identity-cloud-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "business-continuity",
                "name": "Business Continuity",
                "url": "https://update.dsesecurity.com/topic/business-continuity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            },
            {
                "slug": "microsoft-365-identity",
                "name": "Microsoft 365 & Identity",
                "url": "https://update.dsesecurity.com/topic/microsoft-365-identity/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-08-11T09:11:00+00:00",
        "modified_at": "2026-08-11T14:12:11+00:00",
        "reviewed_on": "2026-08-11",
        "reading_minutes": 3,
        "word_count": 642,
        "potentially_affected": "Exchange Online mail-flow connectors; hybrid and on-premises mail servers; SMTP applications, printers, scanners, fax systems, partners, accepted domains, certificates, public IP addresses, DNS, message trace, and operational monitoring.",
        "dse_recommendation": "Export every connector, assign a business and technical owner, document the sender-to-recipient route and dependencies, validate with representative messages, monitor expected traffic and failures, and review or retire the connector on a scheduled date.",
        "primary_source": {
            "name": "Microsoft Learn: Configure mail flow using connectors in Exchange Online",
            "url": "https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow",
            "published_on": "2024-05-29",
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts: connectors are for specific mail-flow scenarios</h2>\n<p>Microsoft’s <a href=\"https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow\" target=\"_blank\" rel=\"noopener noreferrer\">Exchange Online connector guidance</a> defines connectors as instructions that customize how email moves into or out of a Microsoft 365 organization. Microsoft says most tenants do not need connectors for ordinary internet mail because Exchange Online can send and receive that mail without them.</p>\n<p>Documented connector scenarios include mail between Exchange Online and an on-premises mail organization, SMTP relay for devices or applications, and defined routes to or from a partner or service. A hybrid deployment commonly has connectors created by the Hybrid Configuration Wizard; Microsoft advises considering the hybrid model before manually duplicating that routing. All-cloud organizations with printers or applications may use an inbound connector for relay, but Microsoft also documents alternatives that should be evaluated for the specific sender.</p>\n<p>Microsoft’s interface describes connector endpoints as “From” and “To,” although the PowerShell cmdlets retain inbound and outbound terminology. Multiple connectors can apply in a scenario, so selection and scope must be understood. Accepted domains, destination domains, smart hosts, public IP addresses, certificates, DNS, and the sending system can all influence the actual path.</p>\n<p>Microsoft provides built-in validation for connectors that send from Microsoft 365 to an on-premises server or partner. Validation should be completed before a connector is turned on, and each required connector should be validated. Saving a change is an important boundary: Microsoft says the existing connector settings continue to govern mail flow until the edited configuration is saved.</p>\n\n<h2>DSE recommendation: manage each connector as a production route</h2>\n<p>Create a register in which each enabled or disabled connector has enough context to decide whether it is correct, broken, or obsolete:</p>\n<ul>\n<li>connector identity, enabled state, creation source, last change, and tenant;</li>\n<li>business service, business owner, technical owner, support contact, and review date;</li>\n<li>expected sender, recipient, direction, domains, volume, and message examples;</li>\n<li>on-premises servers, smart hosts, public addresses, certificates, accepted domains, DNS, firewall, and application dependencies;</li>\n<li>normal success evidence, monitored failure signals, change window, rollback, and retirement trigger.</li>\n</ul>\n<p>Export the live connector configuration before making a change. Draw the complete route from the originating device, application, user, or server through Exchange Online to the final mailbox or external recipient, including the return path when replies or bidirectional exchange matter. Name which connector should be selected at each boundary and why.</p>\n<ol>\n<li><strong>Test representative messages.</strong> Use approved mailboxes and safe content to exercise each intended direction, recipient domain, application or device class, attachment requirement, and expected sender identity.</li>\n<li><strong>Validate platform and service behavior.</strong> Run Microsoft’s connector validation where available, then use message trace, message headers, application logs, on-premises queues, and recipient confirmation to prove the real route.</li>\n<li><strong>Exercise controlled failure.</strong> Where feasible, test a nonproduction or maintenance scenario for unavailable smart host, expired or mismatched dependency, rejected recipient, and unreachable destination. Confirm that monitoring and escalation identify the right owner.</li>\n<li><strong>Change one route deliberately.</strong> Record the old and proposed settings, predicted connector selection, test cases, save point, rollback, and observation period. Avoid changing DNS, firewall, certificate, application relay, and connector scope simultaneously without an integrated plan.</li>\n<li><strong>Retire stale paths.</strong> Correlate the register with message evidence and system ownership. Disable through an approved observation period before deletion when that approach fits the service, and preserve the configuration and reason for retirement.</li>\n</ol>\n<p>Review connectors after hybrid changes, datacenter moves, provider changes, certificate or address changes, application retirement, domain changes, and unexpected delivery incidents. Track unowned connectors, failed validations, routes without recent evidence, delivery failures, duplicate scopes, dependency expiration, and overdue reviews.</p>\n<p>The purpose is operational clarity. A connector should exist because a named service needs a defined route, and operations should be able to prove both that the route works and that mail does not depend on an abandoned server or undocumented exception.</p>\n\n<h2>Official references</h2>\n<ul>\n<li>Microsoft Learn, <a href=\"https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow\" target=\"_blank\" rel=\"noopener noreferrer\"><em>Configure mail flow using connectors in Exchange Online</em></a>, May 29, 2024.</li>\n<li>Microsoft Learn, <a href=\"https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/validate-connectors\" target=\"_blank\" rel=\"noopener noreferrer\"><em>Validate connectors in Exchange Online</em></a>, February 22, 2023.</li>\n</ul>",
        "content_text": "Source facts: connectors are for specific mail-flow scenarios\nMicrosoft’s Exchange Online connector guidance defines connectors as instructions that customize how email moves into or out of a Microsoft 365 organization. Microsoft says most tenants do not need connectors for ordinary internet mail because Exchange Online can send and receive that mail without them.\nDocumented connector scenarios include mail between Exchange Online and an on-premises mail organization, SMTP relay for devices or applications, and defined routes to or from a partner or service. A hybrid deployment commonly has connectors created by the Hybrid Configuration Wizard; Microsoft advises considering the hybrid model before manually duplicating that routing. All-cloud organizations with printers or applications may use an inbound connector for relay, but Microsoft also documents alternatives that should be evaluated for the specific sender.\nMicrosoft’s interface describes connector endpoints as “From” and “To,” although the PowerShell cmdlets retain inbound and outbound terminology. Multiple connectors can apply in a scenario, so selection and scope must be understood. Accepted domains, destination domains, smart hosts, public IP addresses, certificates, DNS, and the sending system can all influence the actual path.\nMicrosoft provides built-in validation for connectors that send from Microsoft 365 to an on-premises server or partner. Validation should be completed before a connector is turned on, and each required connector should be validated. Saving a change is an important boundary: Microsoft says the existing connector settings continue to govern mail flow until the edited configuration is saved.\n\nDSE recommendation: manage each connector as a production route\nCreate a register in which each enabled or disabled connector has enough context to decide whether it is correct, broken, or obsolete:\n\nconnector identity, enabled state, creation source, last change, and tenant;\nbusiness service, business owner, technical owner, support contact, and review date;\nexpected sender, recipient, direction, domains, volume, and message examples;\non-premises servers, smart hosts, public addresses, certificates, accepted domains, DNS, firewall, and application dependencies;\nnormal success evidence, monitored failure signals, change window, rollback, and retirement trigger.\n\nExport the live connector configuration before making a change. Draw the complete route from the originating device, application, user, or server through Exchange Online to the final mailbox or external recipient, including the return path when replies or bidirectional exchange matter. Name which connector should be selected at each boundary and why.\n\nTest representative messages. Use approved mailboxes and safe content to exercise each intended direction, recipient domain, application or device class, attachment requirement, and expected sender identity.\nValidate platform and service behavior. Run Microsoft’s connector validation where available, then use message trace, message headers, application logs, on-premises queues, and recipient confirmation to prove the real route.\nExercise controlled failure. Where feasible, test a nonproduction or maintenance scenario for unavailable smart host, expired or mismatched dependency, rejected recipient, and unreachable destination. Confirm that monitoring and escalation identify the right owner.\nChange one route deliberately. Record the old and proposed settings, predicted connector selection, test cases, save point, rollback, and observation period. Avoid changing DNS, firewall, certificate, application relay, and connector scope simultaneously without an integrated plan.\nRetire stale paths. Correlate the register with message evidence and system ownership. Disable through an approved observation period before deletion when that approach fits the service, and preserve the configuration and reason for retirement.\n\nReview connectors after hybrid changes, datacenter moves, provider changes, certificate or address changes, application retirement, domain changes, and unexpected delivery incidents. Track unowned connectors, failed validations, routes without recent evidence, delivery failures, duplicate scopes, dependency expiration, and overdue reviews.\nThe purpose is operational clarity. A connector should exist because a named service needs a defined route, and operations should be able to prove both that the route works and that mail does not depend on an abandoned server or undocumented exception.\n\nOfficial references\n\nMicrosoft Learn, Configure mail flow using connectors in Exchange Online, May 29, 2024.\nMicrosoft Learn, Validate connectors in Exchange Online, February 22, 2023.",
        "content_markdown": "## Source facts: connectors are for specific mail-flow scenarios\n\nMicrosoft’s [Exchange Online connector guidance](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow) defines connectors as instructions that customize how email moves into or out of a Microsoft 365 organization. Microsoft says most tenants do not need connectors for ordinary internet mail because Exchange Online can send and receive that mail without them.\n\nDocumented connector scenarios include mail between Exchange Online and an on-premises mail organization, SMTP relay for devices or applications, and defined routes to or from a partner or service. A hybrid deployment commonly has connectors created by the Hybrid Configuration Wizard; Microsoft advises considering the hybrid model before manually duplicating that routing. All-cloud organizations with printers or applications may use an inbound connector for relay, but Microsoft also documents alternatives that should be evaluated for the specific sender.\n\nMicrosoft’s interface describes connector endpoints as “From” and “To,” although the PowerShell cmdlets retain inbound and outbound terminology. Multiple connectors can apply in a scenario, so selection and scope must be understood. Accepted domains, destination domains, smart hosts, public IP addresses, certificates, DNS, and the sending system can all influence the actual path.\n\nMicrosoft provides built-in validation for connectors that send from Microsoft 365 to an on-premises server or partner. Validation should be completed before a connector is turned on, and each required connector should be validated. Saving a change is an important boundary: Microsoft says the existing connector settings continue to govern mail flow until the edited configuration is saved.\n\n## DSE recommendation: manage each connector as a production route\n\nCreate a register in which each enabled or disabled connector has enough context to decide whether it is correct, broken, or obsolete:\n\n- connector identity, enabled state, creation source, last change, and tenant;\n\n- business service, business owner, technical owner, support contact, and review date;\n\n- expected sender, recipient, direction, domains, volume, and message examples;\n\n- on-premises servers, smart hosts, public addresses, certificates, accepted domains, DNS, firewall, and application dependencies;\n\n- normal success evidence, monitored failure signals, change window, rollback, and retirement trigger.\n\nExport the live connector configuration before making a change. Draw the complete route from the originating device, application, user, or server through Exchange Online to the final mailbox or external recipient, including the return path when replies or bidirectional exchange matter. Name which connector should be selected at each boundary and why.\n\n- Test representative messages. Use approved mailboxes and safe content to exercise each intended direction, recipient domain, application or device class, attachment requirement, and expected sender identity.\n\n- Validate platform and service behavior. Run Microsoft’s connector validation where available, then use message trace, message headers, application logs, on-premises queues, and recipient confirmation to prove the real route.\n\n- Exercise controlled failure. Where feasible, test a nonproduction or maintenance scenario for unavailable smart host, expired or mismatched dependency, rejected recipient, and unreachable destination. Confirm that monitoring and escalation identify the right owner.\n\n- Change one route deliberately. Record the old and proposed settings, predicted connector selection, test cases, save point, rollback, and observation period. Avoid changing DNS, firewall, certificate, application relay, and connector scope simultaneously without an integrated plan.\n\n- Retire stale paths. Correlate the register with message evidence and system ownership. Disable through an approved observation period before deletion when that approach fits the service, and preserve the configuration and reason for retirement.\n\nReview connectors after hybrid changes, datacenter moves, provider changes, certificate or address changes, application retirement, domain changes, and unexpected delivery incidents. Track unowned connectors, failed validations, routes without recent evidence, delivery failures, duplicate scopes, dependency expiration, and overdue reviews.\n\nThe purpose is operational clarity. A connector should exist because a named service needs a defined route, and operations should be able to prove both that the route works and that mail does not depend on an abandoned server or undocumented exception.\n\n## Official references\n\n- Microsoft Learn, [Configure mail flow using connectors in Exchange Online](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow), May 29, 2024.\n\n- Microsoft Learn, [Validate connectors in Exchange Online](https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/validate-connectors), February 22, 2023."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/",
                "url": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-08-11"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Give every Exchange Online connector a route owner, test, and retirement date",
                        "item": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/#article",
                "identifier": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/",
                "url": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/",
                "headline": "Give every Exchange Online connector a route owner, test, and retirement date",
                "description": "Most Exchange Online tenants do not need connectors for ordinary internet mail. Where hybrid servers, applications, devices, or partners do require…",
                "abstract": "Most Exchange Online tenants do not need connectors for ordinary internet mail. Where hybrid servers, applications, devices, or partners do require them, document the exact route, validate both directions, monitor delivery, and remove obsolete paths.",
                "articleBody": "Source facts: connectors are for specific mail-flow scenarios\nMicrosoft’s Exchange Online connector guidance defines connectors as instructions that customize how email moves into or out of a Microsoft 365 organization. Microsoft says most tenants do not need connectors for ordinary internet mail because Exchange Online can send and receive that mail without them.\nDocumented connector scenarios include mail between Exchange Online and an on-premises mail organization, SMTP relay for devices or applications, and defined routes to or from a partner or service. A hybrid deployment commonly has connectors created by the Hybrid Configuration Wizard; Microsoft advises considering the hybrid model before manually duplicating that routing. All-cloud organizations with printers or applications may use an inbound connector for relay, but Microsoft also documents alternatives that should be evaluated for the specific sender.\nMicrosoft’s interface describes connector endpoints as “From” and “To,” although the PowerShell cmdlets retain inbound and outbound terminology. Multiple connectors can apply in a scenario, so selection and scope must be understood. Accepted domains, destination domains, smart hosts, public IP addresses, certificates, DNS, and the sending system can all influence the actual path.\nMicrosoft provides built-in validation for connectors that send from Microsoft 365 to an on-premises server or partner. Validation should be completed before a connector is turned on, and each required connector should be validated. Saving a change is an important boundary: Microsoft says the existing connector settings continue to govern mail flow until the edited configuration is saved.\n\nDSE recommendation: manage each connector as a production route\nCreate a register in which each enabled or disabled connector has enough context to decide whether it is correct, broken, or obsolete:\n\nconnector identity, enabled state, creation source, last change, and tenant;\nbusiness service, business owner, technical owner, support contact, and review date;\nexpected sender, recipient, direction, domains, volume, and message examples;\non-premises servers, smart hosts, public addresses, certificates, accepted domains, DNS, firewall, and application dependencies;\nnormal success evidence, monitored failure signals, change window, rollback, and retirement trigger.\n\nExport the live connector configuration before making a change. Draw the complete route from the originating device, application, user, or server through Exchange Online to the final mailbox or external recipient, including the return path when replies or bidirectional exchange matter. Name which connector should be selected at each boundary and why.\n\nTest representative messages. Use approved mailboxes and safe content to exercise each intended direction, recipient domain, application or device class, attachment requirement, and expected sender identity.\nValidate platform and service behavior. Run Microsoft’s connector validation where available, then use message trace, message headers, application logs, on-premises queues, and recipient confirmation to prove the real route.\nExercise controlled failure. Where feasible, test a nonproduction or maintenance scenario for unavailable smart host, expired or mismatched dependency, rejected recipient, and unreachable destination. Confirm that monitoring and escalation identify the right owner.\nChange one route deliberately. Record the old and proposed settings, predicted connector selection, test cases, save point, rollback, and observation period. Avoid changing DNS, firewall, certificate, application relay, and connector scope simultaneously without an integrated plan.\nRetire stale paths. Correlate the register with message evidence and system ownership. Disable through an approved observation period before deletion when that approach fits the service, and preserve the configuration and reason for retirement.\n\nReview connectors after hybrid changes, datacenter moves, provider changes, certificate or address changes, application retirement, domain changes, and unexpected delivery incidents. Track unowned connectors, failed validations, routes without recent evidence, delivery failures, duplicate scopes, dependency expiration, and overdue reviews.\nThe purpose is operational clarity. A connector should exist because a named service needs a defined route, and operations should be able to prove both that the route works and that mail does not depend on an abandoned server or undocumented exception.\n\nOfficial references\n\nMicrosoft Learn, Configure mail flow using connectors in Exchange Online, May 29, 2024.\nMicrosoft Learn, Validate connectors in Exchange Online, February 22, 2023.",
                "datePublished": "2026-08-11T09:11:00+00:00",
                "dateModified": "2026-08-11T14:12:11+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/exchange-online-connector-governance-mail-flow/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/identity-cloud-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/identity-cloud-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Give every Exchange Online connector a route owner, test, and retirement date"
                },
                "articleSection": [
                    "Business Continuity",
                    "IT",
                    "Microsoft 365 & Identity"
                ],
                "keywords": [
                    "Business Continuity",
                    "IT",
                    "Microsoft 365 & Identity",
                    "Checklist",
                    "Important priority"
                ],
                "genre": "Checklist",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Business Continuity",
                        "url": "https://update.dsesecurity.com/topic/business-continuity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Microsoft 365 & Identity",
                        "url": "https://update.dsesecurity.com/topic/microsoft-365-identity/"
                    }
                ],
                "wordCount": 642,
                "timeRequired": "PT3M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Microsoft Learn: Configure mail flow using connectors in Exchange Online",
                    "url": "https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/use-connectors-to-configure-mail-flow",
                    "datePublished": "2024-05-29"
                }
            }
        ]
    }
}