Heard from TEC: How Exchange Online Stopped 70 Million Basic Authentication Connects Daily
At the TEC 2023 conference in Atlanta, Greg Taylor (Microsoft) analyzed the four-year project he led to remove basic authentication from Exchange Online. Microsoft will reuse the methods and tools developed for this project when it removes other features from Microsoft 365. https://practical365.com/basic-authentication-tec2023/
How to access Shared Inboxes with OAuth via IMAP (Basic Authentication Deprecation)
Since Microsoft is deprecating basic auth in the future I cannot use IMAP to access shared inboxes the way I used to: Email address: sharedmailbox[AT]domain.com Incoming Mail Server (IMAP) Username: mymailbox[AT]domain.com/sharedmailbox Hostname: outlook.office365.com Outgoing Mail Server (SMTP) Username: mymailbox[AT]domain.com Hostname: outlook.office365.com In order for the above to work I had to disable security defaults. By 01. October this will stop working. I use the native Apple mail app for managing mails. Now for the life of me I cannot figure out how I could possibly access shared inboxes via OAuth. When I choose to add an "Microsoft Exchange" account (which is the only way I found to use OAuth) I put in sharedmailbox[AT]domain.com as the mail address (which is the shared inbox I want to manage) and as username I choose my account mymailbox[AT]domain.com. When I do that the mail address is simply ignored and I end up adding my personal mailbox instead of the shared mailbox. Trying to login as mymailbox[AT]domain.com/sharedmailbox doesn't work either. Has anyone an idea how to get this working? I'm really used to working with my separate mailboxes and I really can't afford to put licenses on them.
Modern Authentication in on premises Exchage
Dear All Recently CISA commanded all online exchange authentication should be done by Modern Authentication in place of Basic Authentication. (https://www.cisa.gov/sites/default/files/publications/switch-to-modern-authentication-in-exchange-online-062822-508.pdf) My question is, for more security to the Exchange Server, can anyone suggest to me, is there any way to implement this Modern Authentication in place of Basic Authentication in MS Exchange 2016 with AD 2016? Both of my servers are on-premises.
