This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 18%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG%3C/text%3E%3C/svg%3E)
Hi,
We are blocking the legacy authentication for Exchange online via azure ad conditional access policy. The accounts we could find who were leveraging legacy authentication after applying the conditional access policy see no impact. Will it take time to implement? If yes how long? We have tried re-creating outlook profile and still see no changes.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 31%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJX%3C/text%3E%3C/svg%3E)
Hi @GoodResource ,
You could refer to the latest policy updates:
https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-deprecation-in-exchange-online-september/ba-p/3609437
Hi, I'm here to confirm with you if your issue has been resolved. If the problem is successfully solved, you can share your solution and mark them or the helpful reply as answer, this will make answer searching in the forum easier and be beneficial to other community members as well.
Basic Auth should ( and will) be blocked in Exchange Online:
https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online
Using a conditional access policy works for all accounts even those not in Exchange, so use both
Not sure I understand how you are verifying its not working however.
Why are you recreating the Outlook profile? Are you trying to block it ? its an old client?
Hi,
We first took a Azure sign in logs to see which accounts are still leveraging Basic Authentication. And out of such accounts, we found are using via Outlook 15.0 client and so. What we did apply conditional access policy to those users just to see what impact it would bring to them. But we don't see any issue faced by those users. So we thought of re-creating a new Outlook profile if that has the new effect but still no effect. So was the Azure sign in report not correct or does it take time to get this effect. We are planning to block it next week for the entire tenant. Not sure about the impact.
You can enable Modern Auth in Outlook 2013:
https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/enable-modern-authentication?view=o365-worldwide
Ensure you have enabled in Exchange Online as well:
As to why it wasnt blocked, I couldnt tell you other than check the logs and see if that CA policy was applied to those users.