You may find that Microsoft has disabled it already on your tenant, or they will turn off basic authentication. If you head over to the admin portal, you should notice the announcements regarding basic authentication. The clients they have listed are as follows: On, they provide a list of clients that are supported, and you should check it from time to time to ensure that you meet the requirements. To turn off basic authentication, your clients need to support the new authentication method. If you are running Exchange 2016 and higher and you have hybrid running, you can enable modern authentication in Exchange and Microsoft 365, but this discussion is out of scope for this article. Modern authentication is what you and your organization need to be using going forward. –Microsoft Exchange team Modern authentication will supplant basic authentication The policy does not affect Exchange Server on-premises.Įvery day Basic Auth remains enabled in your tenant, your data is at risk, and so your role is to get your clients and apps off Basic Auth, move them to stronger and better options, and then secure your tenant, before we do.

The reason behind stopping this is that it will prevent accounts from being brute-forced or falling victim to password spray attacks.

But Microsoft has now set a definite date, announcing that “effective October 1, 2022, we will begin to permanently disable Basic Auth in all tenants, regardless of usage, with the exception of SMTP Auth.” What does this mean for you? For those new to Microsoft 365, basic authentication allows users to connect to a mailbox using only a username and a password. With COVID changing everything, the deadline was postponed. Microsoft announced back in 2021 that they would be turning off basic authentication for all Exchange Online tenants in Microsoft 365.

Legacy authentication office 365