Can Somebody simplify Modern Auth versus Basic Auth when supporting Multi-Function Printers using M365?

Question

With the improvement in the Security of M365, it is a challenge to properly set up various Multi-Function Printers. Anyone familiar with the Business Printer Provider Community knows their support struggles to provide comprehensive solutions for relatively common configurations. Terms like Basic versus Modern Authentication, OAuth versus Oath 2.0, etc. are not well understood by many of us and this leads to confusion on the practical steps to get the MFP's to support applications like Scan to E-mail.

I want to provide one example, complete with the solution I used. I could not get a Xerox AltaLink C8045 to work with a public outlook.com account. Wanted to try that to keep the cost down. I think Microsoft might be blocking that?

So, I created a M365 account. Using that account with the XEROX recommended settings only worked after I enabled SMTP AUTH in the Microsoft Admin Portal as explained in the following Microsoft link: https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission#use-the-microsoft-365-admin-center-to-enable-or-disable-smtp-auth-on-specific-mailboxes.

This info should help others with a similar problem, which is great.

I think the M365 account being used for Scan to E-mail is now supporting SMTP AUTH and that is what the Xerox MFP requires. Furthermore, this is the only account supporting SMTP AUTH because Microsoft has set the default to not support SMTP AUTH. I think that is considered Basic Auth, not Modern Auth. I also think SMTP AUTH is a part of OAuth and Modern Auth is the same things as OAuth 2.0.

The Xerox Support folks don't know get the C8045 to use Modern Auth. If they did, that is the best way to set up Scan to E-mail. They believe the C8045 can utilize Modern Auth but not how to do it.

So, I will finish this post asking that someone who truly knows replies to say if my use of the terms is correct or not. If not, please correct them.
If some does that, it will go a long way to getting MFP’s using M365 accounts securely.
Also, as a bonus, it would help a lot of us out, if you could confirm:

1. Basic Auth is also called OAuth?
2. Modern Auth is also call OAuth 2.0?

Thanks, Peter

Answer 1

Hi @Pwzcebic ,
1)Basic Auth is also called OAuth?
2) Modern Auth is also call OAuth 2.0?
No, these are four different protocols.
Basic Authentication:The user name and password sent in the authentication exchange. Basic authentication can be configured to use either HTTP or HTTPS transport in a domain or workgroup. This method is the least secure method of authentication.

Modern Authentication :A method of identity management that offers more secure user authentication and authorization. Based on ADAL and OAuth 2.0.

OAuth 2.0 is a complete rewrite of OAuth 1.0 from the ground up, sharing only overall goals and general user experience. OAuth 2.0 is not backwards compatible with OAuth 1.0 or 1.1, and should be thought of as a completely new protocol.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Seems like no one else has chimed in yet to help all of us quickly improve supporting Xerox and other MFP's scan to e-mail using a M365 account. Does anybody have any more accurate insight to share?

Answer 3

Closing this thread here. Better information on this can be found in this thread. https://learn.microsoft.com/en-us/answers/questions/1141052/definitive-guide-to-smtp-auth-vs-basic-auth-vs-oat.html