Is Basic Authentication going away?

Is Basic Authentication going away?

Basic Authentication is superseded by Modern Authentication (based on OAuth 2.0). During 2021, we’ll start to disable Basic Authentication for existing customers who have no recorded usage of Basic Authentication in any of the protocols in scope of this announcement.

Is MAPI Basic Authentication?

MAPI over RPC is known as Outlook Anywhere and uses basic authentication. MAPI over HTTP supports both basic or modern authentication.

Does IMAP use Basic Authentication?

If you’re using POP/IMAP and SMTP for an Exchange Online account in Outlook, you must enable Basic authentication for these protocols. To do this, disable Azure Active Directory security defaults if they are enabled.

Does Office 365 use Basic authentication?

All access to Office 365 will be over Modern Authentication. Clients that rely on legacy authentication protocols (including but not limited to, SMTP, POP, IMAP, ActiveSync Basic, MAPI Basic) will be prevented from accessing Office 365 and will be required to reauthenticate with Modern Authentication.

How do I stop Basic Authentication?

You block Basic authentication in Exchange Online by creating and assigning authentication policies to individual users. The policies define the client protocols where Basic authentication is blocked, and assigning the policy to one or more users blocks their Basic authentication requests for the specified protocols.

Is IMAP being phased out?

On October 13th, 2020, Microsoft will stop supporting username & password authentication for the IMAP and POP3 protocols. In layman terms, any email application out there that connects to Microsoft email servers using IMAP or POP3 (Basic Authentication) will stop working.

Is there an extension for basic authentication on Exchange Online?

The extension is just for organizations currently using Basic Authentication with Exchange Online. New Exchange Online tenancies will still get Basic Authentication disabled by default. Microsoft also will disable Basic Authentication if it detects that Basic Authentication isn’t being used.

When is the end of support for basic authentication?

A more precise end-of-support date will be announced later, the announcement added. The extension is just for organizations currently using Basic Authentication with Exchange Online. New Exchange Online tenancies will still get Basic Authentication disabled by default.

When to use modern authentication or basic authentication?

This means that applications that are using Basic Authentication to connect to Exchange Online might face authentication failures when adopted by a customer who is new to Exchange Online or has not used Basic Authentication applications before. The best way to avoid such failures in your application is to adopt Modern Authentication.

What are the authentication enhancements in extended protection?

The main authentication enhancements that are part of extended protection are service binding and channel binding. Channel binding uses a channel binding token (CBT), to verify that the channel established between two end points was not compromised.