MS turning off Basic Authentication in Exchange Online

[Joe]

Microsoft have published the following notification this week

https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Improving-Security-Together/ba-p/805892

 "Today, we are announcing we are also turning off Basic Authentication in Exchange Online for Exchange ActiveSync (EAS), POP, IMAP and Remote PowerShell at the same time – October 13, 2020"

 

As things stand at the moment this would prevent the Hornbill Service Manager system polling office 365 for email. Have Hornbill any plans to deal with this?

[Keith Stevenson]

Dear Joe,

Thanks for the post. We can confirm that we will support OAuth support for POP3 and IMAP connectors, once MS have done so (They say that they will begin to implement this over the next few months) and before the 2020 deadline. 

 

Kind regards

Keith Stevenson

[Martyn Houghton]

@Keith Stevenson

Thanks for the confirmation, as we too would be affected.

Cheers

Martyn

[Joe]

The MS update indicates (as far as I can tell) that the developer documentation is being finalised (as at May 20), but also that the switch off (if already using basic authentication) is being bumped into 2021.

 

[Steve Giller]

As indicated by @Joe above, the switch of has been delayed : https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-april-2020-update/ba-p/1275508

[Martijn]

is there a way to enable Oauth for sharedmailboxes in hornbill if we disable basic auth ourselfs in ExO ?

[Martyn Houghton]

@Keith Stevenson

Is there any update on this being provisioned given that we are now 12 months down the line and approaching the original deadline?

I appreciate the Microsoft timetable has changed, but from a Security Policy point of view the fact that we have not moved off the older authentication methods is being flagged internally.

Cheers

Martyn

[Keith Stevenson]

@Martyn Houghton

Thanks for the reply. Most of the work is already done as we already provide OAuth authentication in KeySafe (which is where you will store the new credentials)  and this is just exposing that in the Mail Connector configuration. We dont have a firm date, however I will post back next week to confirm when we can expect this. 

Kind Regards

Keith Stevenson

[Martyn Houghton]

@Keith Stevenson

Thanks for the update on the work and the timescale.

Cheers

Martyn

[Keith Stevenson]

@Martyn Houghton

Just an update to say we are still working on this, and will hopefully have a confirmed date within before the end of this month. 

Kind Regards

Keith Stevenson

[Martyn Houghton]

@Keith Stevenson

Thanks for keeping us informed.

Cheers

Martyn

[Michael Sharp]

Whats the position with this please?

[Victor]

@Michael Sharp

Email - Shared Mailbox: You can now connect to your office 365 account with OAuth2 with KeySafe Credentials

https://community.hornbill.com/topic/19925-new-update-hornbill-admin-tool-1327/ (16/12/2020)