Basic Authentication Microsoft - blocked from September 1, 2022

[Mark Bbb]

Basic Authentication and Exchange Online – September 2021 Update - Microsoft Tech Community

Scanning via O365 will be disabled.
That means the authentication needs to be done in a different way.
That is described in the link above.
Some old mailboxes won't receive any mails anymore.
The new protocol is called OAuth 2.0.
Some Ricoh won't support this new protocol.
I'm checking if the Ricoh imc series support this.

[Gift]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Hurray, some more accupational therapy for us powered by M$

[emiliorsg]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Google is also going to block basic authentication. This notification came to me days ago:


"Less secure apps and Google account
To protect your account, starting May 30, 2022, Google will no longer allow the use of third-party apps or devices that ask you to sign in to your Google account with just your username and password.


This term does not apply to Google Workspace or Google Cloud Identity customers. The date that the change will be implemented for these customers will be announced on the Workspace blog at a later date.


Keep reading to learn more.


Special note about sign-ins on Apple devices: Users who have not recently signed in to their Google account using only their username and password will only be able to try to sign in again with the type of Google account they started with. on February 28, 2022. Regular users can continue to sign in to their Google account with their username and password until May 30, 2022.
If an app or site does not meet our security standards, we may block access to users who try to log in to your account from that app or site. Less secure apps can make it easier for hackers to access your account, so blocking logins from these apps helps protect your account"

[rthonpm]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Scanning via O365 will be disabled.
That means the authentication needs to be done in a different way.
That is described in the link above.
Some old mailboxes won't receive any mails anymore.
The new protocol is called OAuth 2.0.
Some Ricoh won't support this new protocol.
I'm checking if the Ricoh imc series support this.

Scanning will still work as it does now as long as the account being used is configured in the 365 tenant to allow SMTP authentication which is what scan to email uses. It's a check-in-the-box for an Exchange admin to change to allow it.


Modern authentication will be needed for accessing mail using an email client no matter what, but all of the embedded systems that only send email will continue to work.

Sent from my BlackBerry using Tapatalk

[mga]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Google is also going to block basic authentication. This notification came to me days ago:


"Less secure apps and Google account
To protect your account, starting May 30, 2022, Google will no longer allow the use of third-party apps or devices that ask you to sign in to your Google account with just your username and password.


This term does not apply to Google Workspace or Google Cloud Identity customers. The date that the change will be implemented for these customers will be announced on the Workspace blog at a later date.


Keep reading to learn more.


Special note about sign-ins on Apple devices: Users who have not recently signed in to their Google account using only their username and password will only be able to try to sign in again with the type of Google account they started with. on February 28, 2022. Regular users can continue to sign in to their Google account with their username and password until May 30, 2022.
If an app or site does not meet our security standards, we may block access to users who try to log in to your account from that app or site. Less secure apps can make it easier for hackers to access your account, so blocking logins from these apps helps protect your account"

I think Google has put this on hold for now I was advised by Konica technical support yesterday so I tried it opened new account and less secure apps was there and work if think the accounts where less secure has been removed already try just opening new account.

[emiliorsg]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

I think Google has put this on hold for now I was advised by Konica technical support yesterday so I tried it opened new account and less secure apps was there and work if think the accounts where less secure has been removed already try just opening new account.

I hope that's true, if not I'm going to have a lot of work.

[sandmanmac]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

I hope that's true, if not I'm going to have a lot of work.

Enabling 'less secure apps' has never been a good solution in my opinion.
I've been enabling 2FA on all my clients that are hosted by Google and creating APP passwords for the devices for a few years now.
I'd suggest you start doing the same.

[rthonpm]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

This is one reason I prefer Microsoft allowing to provision an account for just SMTP Authentication. I can create a mail enabled account and only give it access to send mail. For things like an MFP or a server sending a report, why give the account access to anything else? It's a good compromise to essentially have just a service account living on your mail server.

Sent from my BlackBerry using Tapatalk

[satins]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Enabling 'less secure apps' has never been a good solution in my opinion.
I've been enabling 2FA on all my clients that are hosted by Google and creating APP passwords for the devices for a few years now.
I'd suggest you start doing the same.

+1, it works great.

[blazebusiness]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Scanning will still work as it does now as long as the account being used is configured in the 365 tenant to allow SMTP authentication which is what scan to email uses. It's a check-in-the-box for an Exchange admin to change to allow it.


Modern authentication will be needed for accessing mail using an email client no matter what, but all of the embedded systems that only send email will continue to work.

Sent from my BlackBerry using Tapatalk

Good post

[slimslob]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

Good post

FYI A new Windows Search zero-day is giving Microsoft another security headache | TechRadar

[UNICORNico]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

I give thanks that no customer uses this type of authentication on our devices.
And for the only cases that are used the sending of scanner by email, it is through an email of our company and that according to our mail provider / domain, should not affect us these changes.

[luca72]

Re: Basic Authentication Microsoft - blocked from September 1, 2022

FYI A new Windows Search zero-day is giving Microsoft another security headache | TechRadar

I saw just last night a video on youtube, which talked about this, it seems you can disable from the regedit the voice that activates the remote control protocol by microsoft on the troubleshooter tool, or you can save those who do not have word