Table of contents
Step 1: Download the PhishArm Manifest
Navigate: PhishArm → Settings → Outlook Plugin
Click Download → you will see the manifest file (XML).
Copy the manifest URL.
⚠️ Important: The manifest URL expires in 60 seconds. If it fails, refresh the page and grab a new link.
Step 2: Deploy Plugin via Exchange PowerShell
Log in to your on-prem Exchange Management Shell and run one of the following commands:
For all users in your organization:
New-App -OrganizationApp -Url <ManifestURL> -ProvidedTo Everyone -DefaultStateForUser Enabled
For only specific users:
New-App -OrganizationApp -Url <ManifestURL> -ProvidedTo SpecificUsers -DefaultStateForUser Enabled -UserList [email protected],[email protected]
Step 3. Allow Delegated Permissions
After app deployment, grant delegated permissions by logging into the MS Admin link.
Click Accept when prompted.
This step ensures the add-in can function properly for end users.
Step 4: Whitelist the Plugin Domain
If your organization uses firewalls, proxies, or Zero Trust tools, allow the following domain:
https://outlook-plugin.right-hand.ai
This ensures Outlook can communicate with the PhishArm service.
Step 5: Verify Installation
Wait for deployment to complete.
Ask a user to restart Outlook.
Open any email → check the ribbon or add-ins menu.
You should see the PhishArm button.
Step 6: Reporting Suspicious Emails
Select any email in Outlook.
Click PhishArm → Report.
The email will be securely sent to the Right-Hand Dashboard.
Users will see a confirmation message.
Reference