PIM Manager settings · Settings > Mail & alerting

User name / Password / Key Vault that keeps the password / Secret name

Key	Mail.SmtpCredentials
Where	Settings > Mail & alerting > Mail sending > SMTP relay (also Get Started > Mail sender)
Type	Text
Default	Blank user name (relay needs no sign-in); secret name PIM-SmtpRelayPassword

What it does

The sign-in PIM Manager uses on the SMTP relay. The user name, Key Vault name and secret name are stored with the settings; the password itself is written only to your environment's Key Vault and is never stored in the settings, never shown again and never written to a log.

When set

When set: at every send the PIM Manager and the engine read the password from that Key Vault secret and sign in to the relay with the user name. Typing a new password replaces the secret; leaving the box empty keeps the existing one. If PIM Manager may not write the vault, the save tells you and shows a one-time command (browser sign-in) for someone who may.

When blank or default

When the user name is blank: PIM Manager connects to the relay without signing in (an anonymous internal relay). A password without a user name is refused.

Risk and how to reverse it

If the identities cannot read the secret, or the secret is empty, every relay send fails with that reason (the Mail check shows it). A wrong vault name or a rotated password at the relay has the same effect. Reversible: correct the values or store a new password.

Requires

Admin role in PIM Manager. Mail mode SMTP relay. The PIM Manager and engine identities need Key Vault Secrets User on the secret to read it; the PIM Manager needs permission to write secrets in that vault to store a typed password (otherwise use the provided command).