Basic Auth - Reporting WebService (reports.office365.com )

%3CLINGO-SUB%20id%3D%22lingo-sub-1213904%22%20slang%3D%22en-US%22%3EBasic%20Auth%20-%20Reporting%20WebService%20(reports.office365.com%20)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1213904%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3Ehi%20community..%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Ei%20need%20some%20help%20in%20understanding%20the%20following%20situation.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EIn%202020%2C%20Microsoft%20will%20disable%20Basic%20Auth%20in%20Exchange%20Online.%26nbsp%3B%20I%20would%20assume%20that%20this%20would%20affect%20also%20the%20%3CSTRONG%3Ereportingwebservice%3C%2FSTRONG%3E....right%20%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fprevious-versions%2Foffice%2Fdeveloper%2Fo365-enterprise-developers%2Fjj984328(v%3Doffice.15)%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fprevious-versions%2Foffice%2Fdeveloper%2Fo365-enterprise-developers%2Fjj984328(v%3Doffice.15)%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Euntil%20now%20i%20use%20basic%20auth%20to%20pull%20messagetrace%20data%20via%20the%20following%20call....%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3Ee.g%3C%2FSPAN%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Freports.office365.com%2Fecp%2Freportingwebservice%2Freporting.svc%2FMessageTrace%3F%24format%3Djson%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Freports.office365.com%2Fecp%2Freportingwebservice%2Freporting.svc%2FMessageTrace%3F%24format%3Djson%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Eso%20far%20so%20good.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3Etoday%20i%20have%20created%20in%20my%20lab%20a%20policy%20which%20blocks%20ALL%20basic%20auth%20in%20exchange%20online%20and%20have%20assigned%20it%20to%20the%20user%20account%20i%20use%20for%20the%20rest%20call.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3EAllowBasicAuthActiveSync%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthAutodiscover%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthImap%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthMapi%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthOfflineAddressBook%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthOutlookService%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthPop%20%3A%20False%3CBR%20%2F%3E%3CSTRONG%3EAllowBasicAuthReportingWebServices%20%3A%20False%3C%2FSTRONG%3E%3CBR%20%2F%3EAllowBasicAuthRest%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthRpc%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthSmtp%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthWebServices%20%3A%20False%3CBR%20%2F%3EAllowBasicAuthPowershell%20%3A%20False%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EHOWEVER%2C%20i'm%20still%20able%20to%20pull%20the%20report%20via%20basic%20auth.%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3Ewhy%20%3F%20%3A)%3C%2Fimg%3E%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EQuestions%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E-%20What's%20the%20reason%20%3F%3C%2FP%3E%3CP%3E-%20If%20basic%20auth%20really%20can't%20be%20used%20anymore%20for%20this%20reporting%20service%2C%20HOW%20can%20i%20access%20the%20messagetrace%20information%20in%20an%20automatic%20way...so%20what%20alternatives%20do%20i%20have%20%3F%3CBR%20%2F%3E%3CBR%20%2F%3E(i%20need%20just%20message%20trace%20information%20and%20not%20mailing%20data%20via%20graph%20where%20i%20would%20need%20to%20access%20every%20single%20mailbox)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethank%20you%26nbsp%3B%3C%2FP%3E%3CP%3Estefan%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1213904%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1215446%22%20slang%3D%22en-US%22%3ERe%3A%20Basic%20Auth%20-%20Reporting%20WebService%20(reports.office365.com%20)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1215446%22%20slang%3D%22en-US%22%3E%3CP%3EInteresting.%20It%20took%20~%2012%20hours%20until%20it%20became%20active.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eso%20does%20this%20mean%20that%20the%20reporting%20webservice%20will%20be%20deprecated%20with%20the%20start%20of%20the%20global%20basic%20auth%20disablement%20-%20mid%202020%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2036905%22%20slang%3D%22en-US%22%3ERe%3A%20Basic%20Auth%20-%20Reporting%20WebService%20(reports.office365.com%20)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2036905%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F44882%22%20target%3D%22_blank%22%3E%40Stefan%20Fried%3C%2FA%3E%26nbsp%3Bet.al%3C%2FP%3E%3CP%3E%3CSPAN%3E-%20If%20basic%20auth%20really%20can't%20be%20used%20anymore%20for%20this%20reporting%20service%2C%20HOW%20can%20i%20access%20the%20messagetrace%20information%20in%20an%20automatic%20way...so%20what%20alternatives%20do%20i%20have%20%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIs%20the%20only%20answer%20to%20this%20PowerShell%20cmdlets%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Super Contributor

hi community..

 

i need some help in understanding the following situation.

In 2020, Microsoft will disable Basic Auth in Exchange Online.  I would assume that this would affect also the reportingwebservice....right ?

https://docs.microsoft.com/en-us/previous-versions/office/developer/o365-enterprise-developers/jj984...

 

until now i use basic auth to pull messagetrace data via the following call....

e.ghttps://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace?$format=json

 

so far so good.

today i have created in my lab a policy which blocks ALL basic auth in exchange online and have assigned it to the user account i use for the rest call.

 
 

AllowBasicAuthActiveSync : False
AllowBasicAuthAutodiscover : False
AllowBasicAuthImap : False
AllowBasicAuthMapi : False
AllowBasicAuthOfflineAddressBook : False
AllowBasicAuthOutlookService : False
AllowBasicAuthPop : False
AllowBasicAuthReportingWebServices : False
AllowBasicAuthRest : False
AllowBasicAuthRpc : False
AllowBasicAuthSmtp : False
AllowBasicAuthWebServices : False
AllowBasicAuthPowershell : False

 

HOWEVER, i'm still able to pull the report via basic auth.

why ? :)

 

Questions:

- What's the reason ?

- If basic auth really can't be used anymore for this reporting service, HOW can i access the messagetrace information in an automatic way...so what alternatives do i have ?

(i need just message trace information and not mailing data via graph where i would need to access every single mailbox)

 

thank you 

stefan

 

2 Replies

Interesting. It took ~ 12 hours until it became active.

 

so does this mean that the reporting webservice will be deprecated with the start of the global basic auth disablement - mid 2020 ?

 

 

@Stefan Fried et.al

- If basic auth really can't be used anymore for this reporting service, HOW can i access the messagetrace information in an automatic way...so what alternatives do i have ?

 

Is the only answer to this PowerShell cmdlets?