Microsoft issues final Exchange basic authentication deprecation warning

Reading time icon 2 min. read

Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team Read more

Key notes

  • Microsoft is serious about turning off basic authentication in Exchange Online.
  • You might want to know that the plug is being pulled starting with January 2023.
  • Organizations will receive notifications but they better start preparing for this.

As you all know, for the past couple of years, Microsoft has been warning customers that it is deprecating Basic Authentication in Exchange Online in favor of Modern Auth (OAuth 2.0).

Of course, these warnings have come in waves as Microsoft has proceeded to disable the method in a more staggered manner.

Now, however, it appears that the Redmond company has issued its final public notification about the matter, with the holiday period kicking off next week in many countries.

Microsoft gives final warning about Basic Auth deprecation in Exchange Online

Basic Authtentication is being turned off compeltely in 2023

Through the most recent blog post, the Redmond-based tech giant has advised companies to prepare for Basic Auth being turned off for most protocols in January 2023.

Just so you know, the protocols affected by this deprecation are MAPI, RPC, Offline Address Book (OAB), Exchange Web Services (EWS), POP, IMAP, Exchange ActiveSync (EAS), and Remote PowerShell.

Its also important to note that the protocol will not be disabled for SMTP AUTH, but Microsoft has recommended disabling it by yourself.

You don’t need to worry, as organizations will still be informed seven days prior to the protocol being disabled for them.

And, once it is turned off, affected apps will begin throwing an HTTP error 401 for bad username/password.

That being said, keep in mind that the only way for them to work after that will be to switch to Modern Auth.

Microsoft has noted that it will be impossible to turn on Basic Auth after it’s been disabled in January. You can find extensive guidance on this topic.

What are your thoughts on this situation? Be sure to share your opinions with us in the dedicated comments section located below.

More about the topics: Microsoft Exchange