Basic Auth - Reporting WebService (reports.office365.com )

[StefanFried]

hi community..

i need some help in understanding the following situation.

In 2020, Microsoft will disable Basic Auth in Exchange Online.  I would assume that this would affect also the reportingwebservice....right ?

https://docs.microsoft.com/en-us/previous-versions/office/developer/o365-enterprise-developers/jj984...

until now i use basic auth to pull messagetrace data via the following call....

e.ghttps://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace?$format=json

so far so good.

today i have created in my lab a policy which blocks ALL basic auth in exchange online and have assigned it to the user account i use for the rest call.

AllowBasicAuthActiveSync : False
AllowBasicAuthAutodiscover : False
AllowBasicAuthImap : False
AllowBasicAuthMapi : False
AllowBasicAuthOfflineAddressBook : False
AllowBasicAuthOutlookService : False
AllowBasicAuthPop : False
AllowBasicAuthReportingWebServices : False
AllowBasicAuthRest : False
AllowBasicAuthRpc : False
AllowBasicAuthSmtp : False
AllowBasicAuthWebServices : False
AllowBasicAuthPowershell : False

HOWEVER, i'm still able to pull the report via basic auth.

why ? 🙂

Questions:

- What's the reason ?

- If basic auth really can't be used anymore for this reporting service, HOW can i access the messagetrace information in an automatic way...so what alternatives do i have ?

(i need just message trace information and not mailing data via graph where i would need to access every single mailbox)

thank you 

stefan

[#2]

Interesting. It took ~ 12 hours until it became active.

so does this mean that the reporting webservice will be deprecated with the start of the global basic auth disablement - mid 2020 ?

[#3]

@StefanFried et.al

- If basic auth really can't be used anymore for this reporting service, HOW can i access the messagetrace information in an automatic way...so what alternatives do i have ?

Is the only answer to this PowerShell cmdlets?

[#4]

See the comments in this page for a discussion on this.
https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-s...

Microsoft are planning something in this space soon.

[#5]

Graph API

[#6]

@StefanFried 

You can now use Oauth. 

https://m365admin.handsontek.net/oauth-interface-for-office-365-reporting-web-service/ 

[#7]

🙂 after two years....amazing

[#8]

How to log to "https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace" via .NET code? Any samples?