SMTP AUTH Modern authentication in managed devices

Marek Tomčo 25 Reputation points
2023-01-25T14:12:38.1566667+00:00

Hello,

Our application is distributed by admin to numerous devices, which are then expected to function based on input policy/configuration. With deprecation of Basic login in SMTP Im having hard time finding correct new way of setting up local email notifications.

OAuth2 cant be configured by admin separately for each device, and auth token received on admin machine shouldnt be shared by many devices.

None of these recommendations apply https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365

Our application uses custom C++ solution for emails. We cant rely on any Microsoft solution installed there, as we support multiple different email providers. Currently we use SMTP AUTH with LOGIN, DIGEST-MD5 and CRAM-MD5, all of these I presume are "Basic authentication"

What is the proper way of using SMTP protocol to work in future?

Thank you

Microsoft Exchange Online
Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,337 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,578 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,669 questions
0 comments No comments
{count} vote

Accepted answer
  1. Andy David - MVP 149.2K Reputation points MVP
    2023-01-25T15:54:39.04+00:00

    Hi, Basic auth for SMTP will continue to work. The recommendation of course is to upgrade to Modern Auth, but as long as SMTP auth is enabled in the Exchange Online Tenant, then basic SMTP auth will work for now:

    [https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-onlinehttps://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online

    User's image

    Note also, if you need to continue to use legacy TLS as well for these devices:

    [https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-smtp-authhttps://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-smtp-auth

    User's image

    3 people found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Tim Alvey 1 Reputation point
    2024-07-25T17:51:19.81+00:00

    Konica offers several methods of SMTP authentication, however "Basic" and "Modern" are not options.

    Kerberos, NTLMv1, Digest-MD5, CRAM-MD5, "LOGIN", "PLAIN" are the only options available - do any of these correspond to "Basic" or "Modern"?

    Ref: https://manuals.konicaminolta.eu/bizhub-4752-4052-UD/EN/contents/id08-_102672759.html

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.