Azure Communication Services & SMTP

Posted on by
Scalable Email Infrastructure: Azure Communication Services & SMTP
Azure Communication Service Guide

Scalable Email Infrastructure:
Azure Communication Services & SMTP

Build reliable, enterprise-grade email delivery at scale — with built-in deliverability, domain authentication, and zero server maintenance.

📅 April 2, 2026 ⏱ 12 min read 🔧 Step-by-Step Guide
Azure Communication Service=
📋 Table of Contents
  1. Introduction
  2. What is Azure Communication Services?
  3. Prerequisites
  4. Create ACS Resource
  5. Set Up Email Service
  6. Add & Verify Domain
  7. Link Domain to ACS
  8. Generate SMTP Credentials
  9. Send Your First Email
  10. Monitor & Troubleshoot
  11. Best Practices
  12. Conclusion
Intro

Introduction

Email remains one of the most critical communication channels for modern applications — from transactional notifications and password resets to marketing campaigns and system alerts. But building a reliable, scalable email infrastructure from scratch is genuinely complex.

You need to manage deliverability, handle failures, monitor performance, comply with regulations, and maintain reputation scores across ISPs. Azure Communication Services (ACS) takes all of this complexity off your plate.

💡
Who this guide is for Developers and architects building email infrastructure for production workloads. Basic knowledge of Azure and SMTP is helpful but not required.
01

What is Azure Communication Services?

Azure Communication Services (ACS) is a cloud-based communication platform built on Microsoft’s battle-tested infrastructure. For email, it provides:

  • A fully managed email sending infrastructure
  • Built-in email deliverability optimization
  • SMTP relay support for easy integration with existing apps
  • REST APIs and SDKs for programmatic control
  • Domain authentication — DKIM, SPF, DMARC
  • Analytics and monitoring dashboards

Sending Methods Comparison

FeatureSMTP RelayREST APISDK
Language Agnostic✅ Yes✅ Yes❌ Limited
Easy Setup✅ SimpleMediumMedium
Attachment Support✅ Yes✅ Yes✅ Yes
Bulk Sending✅ Yes✅ Yes✅ Yes
Real-time Status❌ No✅ Yes✅ Yes
Pre

Prerequisites

  • An active Azure subscription (free tier works for testing)
  • Azure CLI installed, or access to the Azure Portal
  • A custom domain you own (e.g., yourdomain.com)
  • Access to your domain’s DNS settings
  • A code editor and basic command-line knowledge
01

Create an Azure Communication Services Resource

1.1 — Navigate to Azure Portal

  1. Go to portal.azure.com and sign in.
  2. Search for “Communication Services” and select it.
  3. Click “+ Create”.
Azure Communication Services
Azure Communication Services

1.2 — Configure the Resource

  1. Select your Subscription and Resource Group.
  2. Enter a unique Resource Name (e.g., MAHARJAN-ACS).
  3. Choose your Data Location.
  4. Click “Review + Create”, then “Create”.
Azure Communication Services
⚠️
Permanent Choice Data Location cannot be changed after creation. Choose based on your compliance requirements.
Azure Communication Services Azure Communication Services
02

Set Up an Email Communication Service

  1. Inside your ACS resource, navigate to “Email” in the left panel.
  2. Search for “Email Communication Services” and click “+ Create”.
  3. Fill in subscription, resource group, region, and data residency.
  4. Click “Create”.
Azure Communication Services Azure Communication Services Azure Communication Services
03

Add and Verify Your Custom Domain

Option A — Azure-Managed Domain (Testing)

  1. In your Email Communication Service, click “Domains”.
  2. Click “+ Add domain” → “Azure managed domain”.
  3. Instantly verified — no DNS steps needed.
Azure Communication Services Azure Communication Services

Option B — Custom Domain (Production)

  1. Click “+ Add domain” → “Custom domain”.
  2. Enter your domain (e.g., maharjan-binod.com.np).
  3. ACS generates SPF, DKIM, and DMARC DNS records.
Azure Communication Services Azure Communication Services Azure Communication Services Azure Communication Services Azure Communication Services Azure Communication Services
  1. Add all TXT and CNAME records to your DNS provider.
Azure Communication Services
  1. Return to ACS and click “Verify” (propagation: 5–60 min).
Azure Communication Services
💡
Pro Tip Use Azure DNS or Cloudflare for faster propagation — usually under 5 minutes. Always configure DKIM and DMARC to protect your domain reputation.
04

Link Domain to Your ACS Resource

  1. Go to your ACS resource → “Email” → “Domains”.
  2. Click “+ Connect domain”.
  3. Select your Email Communication Service and verified domain.
  4. Click “Connect”.
Azure Communication Services Azure Communication Services
Azure Communication Services
05

Generate SMTP Credentials

  1. Navigate to “Settings” → “Keys” in your ACS resource.
  2. Copy the Primary connection string.
Azure Communication Services
SettingValue
SMTP Hostsmtp.azurecomm.net
SMTP Port587 (TLS) or 465 (SSL)
EncryptionSTARTTLS
Username<ResourceName>.<AccessKey>
PasswordYour Base64-encoded Access Key
From Addressdonotreply@<your-verified-domain>
06

Send Your First Email via SMTP

Azure Communication Services Azure Communication Services
06.1

Send Email via PowerShell using SMTP Authentication (Relay)

Azure Communication Services
  1. Search for App Registration “New Registration” → “ACS-SMTP-App” Register.
  2. Copy the Application (Client) ID and Directory (Tenant) ID.
  3. Under Manage Click on Certificates & Secrets then Create New Client secret..
  4. Copy the Secret Value and close..
Azure Communication Services Azure Communication Services

Back to Communication Service “MAHARJAN-ACS | SMTP Usernames”

Azure Communication Services Azure Communication Services Azure Communication Services
SettingValue
SMTP Hostsmtp.azurecomm.net
SMTP Port587 (TLS)
EncryptionSTARTTLS/SSL
Username"[ACS_Resource_Name].[Entra_App_ID].[Entra_Tenant_ID]"
Password “[Entra_App_Secret_Value]”
From Addressdonotreply@<your-verified-domain>

PowerShell — Send-MailMessage

PowerShell 
# 1. Define your credentials
$SmtpServer = "smtp.azurecomm.net"
$Port = 587
#$Username = "[ACS_Resource_Name].[Entra_App_ID].[Entra_Tenant_ID]"
#$username = "MAHARJAN-ACS.67a1a0f4-b9c5-41bc-95d6-4765eb33a7cf.4933f1e6-f805-4f11-9e4b-c3b401ea89ed"
$username = "MobileBankingAlert@maharjan-binod.com.np"
#$Password = "[Entra_App_Secret_Value]" # This is the 'Value', not the Secret ID
$Password = "3xJ8Q~UhYrJp9r5UomFtG8XmB1zIXWOuYWlECc.N"

# 2. Create the Credential Object
$SecPassword = ConvertTo-SecureString $Password -AsPlainText -Force
$Credential = New-Object System.Management.Automation.PSCredential($Username, $SecPassword)

# 3. Define Email Details
$Params = @{
    From       = "DoNotReply@maharjan-binod.com.np" # Must be your verified MailFrom address
    To         = "binod.maharjan@outlook.com","binodmhr12345@gmail.com"
    Subject    = "ACS SMTP Test"
    Body       = "This is a test email sent from Azure Communication Services via PowerShell."
    SmtpServer = $SmtpServer
    Port       = $Port
    Credential = $Credential
    UseSsl     = $true # Azure requires STARTTLS/SSL
}

# 4. Send the Email
try {
    Send-MailMessage @Params
    Write-Host "Success: Email sent!" -ForegroundColor Green
}
catch {
    Write-Error "Failed to send email. Error: $($_.Exception.Message)"
}
Azure Communication Services Azure Communication Services
07

Monitor and Troubleshoot

Enable Diagnostic Logging

  1. Navigate to “Monitoring” → “Diagnostic settings”.
  2. Click “+ Add diagnostic setting”.
  3. Select SendMailOperational and DeliveryStatusUpdate.
  4. Choose a destination and click “Save”.
Azure Communication Services Azure Communication Services
Azure Communication Services

Common Issues & Fixes

ErrorCauseFix
Auth failed (535)Wrong username formatUse resource.accesskey format
Emails going to spamMissing SPF/DKIMVerify all DNS records in ACS
DNS not verifyingPropagation delayWait 60 min; check with MXToolbox
Connection timeoutWrong port/firewallUse port 587 with STARTTLS
From domain rejectedDomain not linkedLink verified domain in ACS
Rate limit exceededToo fastAdd exponential backoff
★

Best Practices

Domain Authentication

  • Always configure SPF, DKIM, and DMARC for your sending domain
  • Use a dedicated subdomain (e.g., mail.yourdomain.com)
  • Never use a free email domain as your From address

Sending Reputation

  • Start with low volume and ramp up gradually
  • Keep bounce rate below 2% and unsubscribe rate below 0.1%
  • Remove hard-bounced addresses immediately

Security

  • Store credentials in Azure Key Vault — never hardcode them
  • Rotate ACS access keys every 90 days
  • Use Managed Identity where possible

Performance

  • Use connection pooling for high-volume sending
  • Implement retry logic with exponential backoff
  • For 10,000+ emails/hour, use the ACS REST API with batching
✓

Conclusion

Azure Communication Services provides a powerful, production-ready email infrastructure that removes the operational burden of managing your own SMTP servers. Whether you’re sending a handful of transactional emails or millions of notifications per day, ACS scales with you.

  • Creating and configuring an ACS resource
  • Setting up and verifying a custom sending domain
  • Generating SMTP credentials
  • Sending emails from Node.js, Python, and C#
  • Monitoring, alerting, and best practices
💡
Quick Start Use the Azure-managed domain for a proof of concept first, then migrate to a custom domain before production. You can be live in under 30 minutes.
Azure Email SMTP ACS Infrastructure

Published April 2, 2026  ·  Azure Email  ·  Azure Communication Service Series