SMTP email configuration with O365 via Modern/OAuth Authentication

When you are referring to the O365 SMTP configuration, are you referring to the configuration parameters Common\MailNotification?

Hi Markus,

since I have the same issue I hope you will get notified about my reply even if it's 5 months later.

There is no option for an OAuth Token in the "Common\MailNotification" Parameters as far as I can see. Is there another way to configure modern authentication for Mail Notifications within One Identity Manager?

If not, do you know of any workaround that we could use?

And do you know if support for modern authentication is on the Roadmap?

Best Regards

Sebastian

Hi Markus,

since I have the same issue I hope you will get notified about my reply even if it's 5 months later.

There is no option for an OAuth Token in the "Common\MailNotification" Parameters as far as I can see. Is there another way to configure modern authentication for Mail Notifications within One Identity Manager?

If not, do you know of any workaround that we could use?

And do you know if support for modern authentication is on the Roadmap?

Best Regards

Sebastian

Hi Sebastian,

we do have entry 430699 443356 in our backlog for that.

May I ask what type of Email server you do have in mind? Is it Exchange Online or a different one?

Hi Markus,

the customer is using exchange online. 

So smtp.office365.com

But enabling Basic Authentication as a Workaround is not an option for them.

Best Regards

Sebastian

In the meantime the backlog entry is consolidated to 443356. Just if you want to check the release notes when it is released.

Thanks Markus!

based on your answer I guess you don't know of any workaround we could use until this is implemented?

And since it's in the backlog, it will probably not be implemented any time soon?

Hi Sebastian,

Have you considered setting up an SMTPRelay on the Office 365 side (see How to Setup SMTP Relay in Office 365 — LazyAdmin for example).

Doing that you'd have to fill in the SMTPPort (25), and the SMTPRelay but as long as your One Identity server's IP address is known and trusted on the O365 side you should not have to authenticate there using MFA credentials...

As Jos suggested a SMTP relay is an option or enabling SMTP auth for a specific mailbox.

https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365

Hi,

After visiting this thread, and given we're using basic smtp against Google Mail, I've been searching for workarounds should the big G decided to switch to "modern authentication" in the short term ,  too.

At first I've considered Keycloak or an intermediate MTA, but searching the community for the former I've found this utility which might be useful. Have a look:

https://github.com/kartverket/skyline

Hth!

Hi Jos,

thank you for this suggestion. I will bring this to the customer as an option and we will probably use this solution

Hi Juancarlos,

thank you for this more versatile soltution. If we cannot use the Microsoft specific solution suggested by Jos, I will have a look at this.

I'm sure this will also be helpful to a lot of people that are not using Microsoft365 but still need a workaround for this

Thanks to everyone for your quick replies and helpful suggestions!

Hi JuanCarlos,

Probably 'known' but for Google Mail you can have a similar set-up for SMTP Relay where specific IP addresses are allowed;

support.google.com/.../2956491