PEGA ingesting inbound Office Message Encryption mails

General
,
1

Is there a way to ingest emails into PEGA v8 that have been encrypted externally by a client using Office365 Office Message Encryption??

At the moment we have to use a manual workaround of opening the mail in outlook, removing encryption and resending to the PEGA mailbox to be ingested.

Any advice greatly appreciated, as I see this being a bigger issue as the popularity of OME increases amongst larger Microsoft supported organisations.

2

@GarethS17305792 :warning: This is a GenAI-powered tool. All generated answers require validation against the provided references.

This is indeed a growing issue as OME adoption increases among larger organizations.

After researching this topic , I can confirm that currently, there is no out-of-the-box solution in PEGA v8 that allows for automatic decryption of OME-encrypted emails. The manual workaround you described (opening emails in Outlook, removing encryption, and resending to the PEGA mailbox) is unfortunately the standard approach that organizations are using to address this limitation.

The core challenge lies in how Office365 Message Encryption works. Unlike other encryption methods that use certificates for decryption (which PEGA can be configured to handle), OME relies on Office365 credentials for authentication. This authentication mechanism makes it particularly difficult for third-party systems like PEGA to programmatically decrypt these messages without manual intervention.

There has been discussion about this issue in the PEGA community. For example, I found a relevant thread on the PEGA Support portal titled “Decrypt Emails from Microsoft OME / O365” where other users reported similar challenges with finding a pattern or mechanism that would allow PEGA to decrypt OME emails automatically.

While Microsoft Graph API provides robust capabilities for email processing integration, there doesn’t appear to be a straightforward solution available that would enable PEGA to automatically handle OME decryption at this time.

Given the increasing popularity of OME, I would recommend:

  1. Submitting a feature request through PEGA Support to formally document this requirement
  2. Exploring if your Microsoft admins can create a mail flow rule or automated process on the Microsoft side that would handle decryption before messages reach PEGA
  3. Considering alternative secure email methods that use certificate-based encryption which PEGA can be configured to handle automatically