Multiple Mailboxes

CodeShell

The day that mailcow officially released SSO Support I started using it with Authentik.
But I immediately noticed that there is no apparent way to have one IdP User like inside of Authentik and multiple
Mailboxes. This is because mailcow uses the email claim from the IdP to create and log the user into the correct Mailbox. So this would mean that you have to have one IdP User bound to one Mailbox, this can be really annoying as you have to login and logout each time you want to switch Mailboxes.
So I developed a Oauth Middleware,
here is how it works, instead of setting Oauth Endpoints to your IdP Instance you set them to Mailauth, this way Mailauth can modify the email claim each time mailcow
requests Userinfo and tries to login the User.
With Mailauth in place you will login with SSO and will be presented with an Interface where you can select any Mailbox created / registered with Mailauth.

I hope this helps anyone!

esackbauer

CodeShell this can be really annoying as you have to login and logout each time you want to switch Mailboxes.

Why dont you simply delegate and share the folders of the additional mailboxes to the Authentik user?

CodeShell

esackbauer sorry could you further elaborate?

esackbauer Yes you would be correct this also works,
I assume you mean using multiple „identities“ (emails) in one mailbox.
But this isn’t the level of separation I was looking for.
I mean separating things like Daily User and Sysadmin (+ Postmaster).

esackbauer

CodeShell I assume you mean using multiple „identities“ (emails) in one mailbox.

No I mean delegating/sharing multipe mailboxes with one user. Thats why mailcow is not just a mail server, but a groupware.

CodeShell

Really? How does this work?

Ok this looks quite handy. Yes this definitely works too, but for those who use Roundcube this won‘t work (?),
I guess that‘ll teach me. But I still like to have multiple Mailboxes for one User (this is my preferred way to do it),
it just isolates everything a bit more.

Side note: how can I rename this Thread, the title is really not specific

esackbauer

CodeShell but for those who use Roundcube this won‘t work (?),

It will also work for Roundcube. You will see the additional folders from other mailboxes in the IMAP tree. So any client actually can see those folders.

CodeShell

esackbauer
Thank you this is a really useful tip, I will probably use delegation with my app.
I personally still like to visually seperate admin from personal. (Not everything in one mailbox)

- Admin
- Personal
  |__________ Social Media
  |__________ Programms
  [ ... ]

esackbauer

It is visually separated, it is not everything in one mailbox. All other mailboxes will be under “Shared”, and then separated by mailbox name.