Configure Amazon SES as External SMTP Email Provider

Auth0 allows you to configure your own SMTP email provider so you can more completely manage, monitor, and troubleshoot your email communications. Auth0’s built-in email infrastructure should be used for testing emails only.

Prerequisites

• To ensure that emails can be sent from Auth0 to your SMTP, open ports and allow inbound connections from specific IP addresses. To update the list of IPs, navigate to Dashboard > Branding > Email Provider. See Add IP Addresses to AllowList for details.
• You must have an Amazon AWS account.
• Determine which credentials you want to use: API or SMTP. For more info about SES credentials, see Amazon’s Using Credentials With Amazon SES.

Configure Amazon SES with API credentials

1. Log in to your Amazon AWS account.

2. Verify your domain.

3. Verify email addresses

4. Request production access.

5. Get your AWS access keys. Copy these keys; you will need to enter these values into Auth0.

6. Attach a policy with the proper permissions. Attach a policy with the ses:SendRawEmail and ses:SendEmail permissions, as in this example:

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "ses:SendRawEmail",
                   "ses:SendEmail"
               ],
               "Resource": "*"
           }
       ]
   }
   

7. Navigate to Auth0 Dashboard > Branding > Email Provider.

8. Activate the Use my own email provider toggle.

9. Click the Amazon Web Services logo.

10. Provide a From email address, enter your AWS Access Key Id and Secret Access Key, select your Region.

11. Click Save.

Configure Amazon SES with SMTP credentials

1. Sign up for an Amazon AWS account, or log in.
2. Verify your domain.
3. Request production access.
4. Get your SMTP credentials. Copy the security credentials; you will need to enter these values into Auth0.
5. Navigate to Dashboard > Emails > Custom Email Providers.
6. Activate the Use my own email provider toggle.
7. Click the SMTP logo.
8. Provide a From email address, then enter your SMTP server Host, Port, Username, and Password, and click Save. You can use email-smtp.us-east-1.amazonaws.com (using the appropriate region rather than us-east-1) for Host and 587 for Port.

Test email

You can now send a test email using the Send Test Email button. If you have configured everything correctly, you will receive a confirmation email. If you do not receive an email after a few minutes, please check your Auth0 logs for any failures.

The Amazon SES console will now display delivery insights for all emails that have been sent to your users.