Scan to email is the feature people buy a multifunction copier for and the feature that most often does not work on day one. You hit scan, pick a name, press start, and nothing arrives. No error, no bounce, just silence. Then you spend three weeks emailing PDFs to yourself from your phone instead.
The reason is almost never the copier. It is that Microsoft and Google both tightened how devices are allowed to send mail, and a lot of dealer techs are still working from a setup sheet written for a world that ended a few years ago. Here is how scan to email actually works on a leased copier now, what to give your dealer, and how to get it configured properly.
The Three Ways a Copier Can Send Email
1. Direct SMTP through your mail provider. The copier authenticates as a real mailbox and sends through Microsoft 365 or Google Workspace. Cleanest option. Requires a licensed mailbox or a dedicated account, and requires modern authentication.
2. SMTP relay through your tenant. Microsoft 365 supports a relay connector that accepts mail from a fixed public IP without a mailbox login. Good for offices with a static public IP. Nothing to log in with, so nothing to expire.
3. The vendor's own cloud service. Canon, Ricoh, Xerox, and Konica Minolta all offer a hosted scan service that handles the mail sending for you. Easiest to stand up, but it means your scanned documents pass through the vendor's infrastructure, which matters if you are under HIPAA or a client confidentiality obligation. Worth a conversation before you pick it, especially for a medical office copier lease.
What Your Dealer Needs From You
The install tech will ask for these. Having them ready is the difference between a 20 minute setup and a second visit:
- SMTP server hostname, usually smtp.office365.com or smtp.gmail.com
- Port and encryption: 587 with STARTTLS in most cases, 465 with SSL on some devices
- The sending account address and its credentials or app password
- A valid "from" address that your domain will accept, ideally something like copier@yourdomain.com
- Your domain's SPF record, so the sending path is authorized
- Firewall permission for outbound 587 from the copier's IP
- DNS servers, since the copier has to resolve the mail host
The "from" address matters more than people expect. If the copier sends as scanner@yourdomain.com and that address does not exist and is not authorized in SPF, your own mail server may quietly drop the message. Silent failure, no bounce, exactly the symptom everyone describes.
The Basic Authentication Problem
This is the big one. Microsoft retired basic authentication for most protocols in Exchange Online, and Google removed less secure app access from Workspace. Older copiers, and plenty of machines still under lease from three or four years ago, only speak basic auth. They send a username and password in the old way and Microsoft simply refuses.
Your options, in order of how well they work:
Firmware update. Most current generation machines from the major brands support OAuth 2.0 for Microsoft 365 and Google, but only on recent firmware. Ask your dealer to check and update. This is included on a standard service agreement.
Use the SMTP relay path. Set up a connector in Exchange admin center that accepts mail from your office's static public IP. The copier sends with no credentials at all. Reliable, and it never breaks when a password changes.
Use a dedicated mailbox with an app password. Works on Google Workspace with two factor enabled on the account. Slightly fragile because the password can be revoked.
Scan to folder instead. If email is fighting you, scan to a shared network folder over SMB and let people grab documents from there. Requires an SMB v2 or v3 capable machine, since SMB v1 is disabled by default on modern Windows for good reason.
Practical Configuration That Saves Headaches
Once it sends, set it up so people actually use it:
- Build the address book properly. Import your real contacts and distribution lists. A machine with eight one touch buttons that people actually use beats a perfect setup nobody navigates.
- Default to searchable PDF. OCR is standard on almost every current multifunction unit. A scanned contract you can search is worth far more than a flat image.
- Set resolution to 300 dpi, not 600. 600 dpi color scans produce enormous files that bounce off attachment limits. 300 dpi is fine for documents.
- Know your attachment ceiling. Microsoft 365 caps around 25 MB and Google around 25 MB. A 40 page color scan can blow past that. Turn on the machine's "split by size" or "send as link" option.
- Enable scan to me. If the machine supports user login, "scan to myself" is one button and removes the whole address book problem for most users.
What Most Guides Miss
The thing that catches offices out is not setup. It is that scan to email breaks later, quietly, and nobody connects the dots.
Here is the pattern. Setup uses a service account with a password. Nine months in, IT enforces a password rotation policy, or someone enables multifactor authentication tenant wide, or a security baseline gets applied. The copier's stored credential is now invalid. The machine keeps accepting scan jobs and reporting success on its own screen, because from its point of view the job completed. The mail just never leaves. Staff assume they did something wrong, stop using the feature, and revert to walking to the machine and carrying paper.
Three things prevent this. First, use a dedicated service account excluded from password rotation, or better, use IP based relay so there is no credential at all. Second, put the copier's email configuration in your IT documentation, so whoever applies the next security policy knows a device depends on it. Third, test scan to email after any change to your mail tenant, the same way you would test a line of business app.
It is also worth logging this in your service records. If the dealer configured it, they should re-configure it under the agreement rather than billing you an hourly visit. Check what your agreement says about software and configuration work against hardware work, since the two are often priced very differently. Our breakdown of copier lease IT requirements covers where that line usually falls, and who maintains a leased copier explains what the dealer owes you.
Ready to Compare Copier Lease Quotes?
Ready to compare copier lease quotes from verified dealers in your area? CopierFinder connects you with pre-vetted local providers so you can compare real pricing, not ballpark estimates. No obligation. No sales pressure. Just honest numbers so you can make the right call for your business.