{"id":473,"date":"2019-09-24T14:14:31","date_gmt":"2019-09-24T13:14:31","guid":{"rendered":"http:\/\/blogs-new.it.ox.ac.uk\/nexus\/?p=473"},"modified":"2019-09-24T14:17:28","modified_gmt":"2019-09-24T13:17:28","slug":"basicauthdiscontinued","status":"publish","type":"post","link":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/2019\/09\/24\/basicauthdiscontinued\/","title":{"rendered":"Nexus365: An end to Basic Authentication support."},"content":{"rendered":"<div class=\"css-940\"><\/div>\n<div class=\"ms-Panel-scrollableContent scrollableContent-777\">\n<div class=\"ms-Panel-content content-937\">\n<div class=\"css-247\">\n<div class=\"container-876\">\n<div class=\"ms-MessageBar ms-MessageBar--severeWarning ms-MessageBar-multiline actByMessageBar-947\">\n<div class=\"ms-MessageBar-content content-948\">\n<h3 id=\"MessageBar4204\" class=\"ms-MessageBar-text text-951\"><strong>Executive Summary<\/strong><\/h3>\n<p class=\"ms-MessageBar-text text-951\">From 13th October 2020 Microsoft will discontinue support for Basic Authentication for EWS, EAS, IMAP, POP and RPS. This does not (currently) impact SMTP AUTH. Only applications which use secure authentication technologies, such as OAuth 2.0, will continue to work.<\/p>\n<h3 class=\"ms-MessageBar-text text-951\">Details<\/h3>\n<p class=\"ms-MessageBar-text text-951\">In just over one year&#8217;s time Microsoft will end support for Basic Authentication. This method of logging in is very simple, and widely supported, but makes it far too simple for someone malicious to intercept your credentials. Quite simply it&#8217;s no longer good enough. Microsoft want all users of their service &#8211; which includes all Oxford University staff and students &#8211; to switch to &#8216;Modern Authentication&#8217; technologies before October 2020. These use OAuth 2.0 token-based authentication which are more secure because they are application-specific and time-limited, and can&#8217;t therefore be re-used.<br \/>\nFor message <em>sending<\/em> you can continue to use Basic Authentication in SMTP AUTH, for the foreseeable future, but we would urge you to seek a more secure alternative if possible.<\/p>\n<\/div>\n<\/div>\n<h3 class=\"ms-MessageBar-text text-951\"><strong>Impact<\/strong><\/h3>\n<div class=\"ms-MessageBar ms-MessageBar--severeWarning ms-MessageBar-multiline actByMessageBar-947\">\n<div class=\"ms-MessageBar-content content-948\">\n<div class=\"ms-MessageBar-text text-951\"><strong>POP\/IMAP<\/strong><br \/>\nIt is likely that many POP\/IMAP clients will be affected. Microsoft will be adding support for OAth to both POP3 and IMAP4 services over the next few months so you should update to a client that supports Modern Authentication as soon as possible.<\/div>\n<div class=\"ms-MessageBar-text text-951\"><\/div>\n<div class=\"ms-MessageBar-text text-951\"><strong>ActiveSync<\/strong><br \/>\nMost mobile devices will be connecting via the ActiveSync protocol. Microsoft&#8217;s advice is to switch to Outlook Mobile, although there are other applications which also support Modern Authentication if you prefer a non-Microsoft client.<\/div>\n<div class=\"ms-MessageBar-text text-951\">Mobile devices can also access Nexus365 via\u00a0https:\/\/outlook.office365.com\/, which will detect a mobile device and reformat the screen appropriately to enable small-screen viewing.<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Executive Summary From 13th October 2020 Microsoft will discontinue support for Basic Authentication for EWS, EAS, IMAP, POP and RPS. This does not (currently) impact SMTP AUTH. Only applications which use secure authentication technologies, such as OAuth 2.0, will continue &hellip; <a href=\"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/2019\/09\/24\/basicauthdiscontinued\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":107,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-473","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts\/473","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/users\/107"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/comments?post=473"}],"version-history":[{"count":3,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts\/473\/revisions"}],"predecessor-version":[{"id":476,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts\/473\/revisions\/476"}],"wp:attachment":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/media?parent=473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/categories?post=473"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/tags?post=473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}