Re: MS Deprecation Basic Authentication

[Dmitry Vayntrub <dmitry () SFSU EDU>]

Modern versions of major non-MS email clients do now support Modern Auth (Oauth) - including Apple Mail and Gmail 
clients. It would require to recreate profile if the original one was created with Basic Authentication, but those 
clients can still be used unless you disable all protocols but MAPI.
That's not to say that when you are in Office 365 ecosystem already, why not use Outlook - for easier support, 
consistent user experience (centrally managed add-ons), and security capabilities (remote wipe). Outlook for Mac and 
Outlook Mobile came a long way and are feasible options now.

Thank you,
Dmitry Vayntrub
Sr. Director, Cloud and Systems Services
Information Technology Services
San Francisco State University

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Shane Kroening
Sent: Thursday, August 26, 2021 8:40 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] MS Deprecation Basic Authentication

Hi Robert,

I can empathize and understand the perspective of people preferring to use Apple Mail and not wanting to move to 
Outlook for Mac given its history. Unfortunately, the reality (as you noted) is that they don't really have a choice 
and will need to use Outlook for Mac or the online web access. I've seen several universities and businesses be 
successful in transitioning by informing people early on and making sure they realize that the latest version of 
Outlook for Mac has come a long way from it's not-so-humble beginnings.

Best,

Shane Kroening  [signature_796095325] 
<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fqualys&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236392087%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=dmMRdHwqYz%2BHqHyVvkRdVkVJHDi%2FIVmcRSqeNztKX1k%3D&reserved=0>
Technical Account Manager, Pre-Sales, Central (SLED)

skroening () qualys com<mailto:skroening () qualys com>
414.791.5674

Qualys, Inc. - 
Blog<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fqualys.com%2Fblog&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236402077%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ENAlJnGR%2F9KGg6vYb8o5t9V1Hdmz87p%2Bwuuh8LyPxIw%3D&reserved=0>
 | 
Community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.qualys.com%2F&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236402077%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=NLuv2LRS95IAbuv1vkfzIJNNscKh0%2BpPnf0CkQ2pTsg%3D&reserved=0>
 | 
Twitter<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fqualys&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236402077%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=9F%2BExl6Br5VZdF6oHySjXKYLe9FK4jxclBs84JecMKI%3D&reserved=0>

Schedule a Call<https://outlook.office365.com/owa/calendar/ShaneKroening () qualys onmicrosoft com/bookings/>



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Barton, Robert W. <bartonrt () LEWISU EDU<mailto:bartonrt () LEWISU EDU>>
Date: Thursday, August 26, 2021 at 10:07 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: [SECURITY] MS Deprecation Basic Authentication
Morning,

Q2 of this year, Microsoft was scheduled to deprecate basic authentication in M365.  It has been postponed for now.  
But this just gives tenants more time to address the apps/people using older protocols.  For those using Apple 
products, it seems that IMAP, SMTP, and POP are common, and the products have no updates/upgrades to be found to 
address this coming issue.  If you had these products in the mix, what did you move to?  Did you force people to move 
to OUTLOOK.COM?  Some people are reticent to move to a MS product, so I figured others may have already had this dance 
with staff and faculty, and maybe had an answer.

Yes, IT was more distributed previously, and this is a pain point of centralizing.

Robert W. Barton
Executive Director of Information Security & Policy
Lewis University
1 University Parkway
Romeoville, IL  60446-2200
815-836-5663

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236412070%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=eiAGSQa0lD37NBWWYuwaCSFQ%2B6O4QzXtscz3cOvLdS4%3D&reserved=0>


[https://d1dejaj6dcqv24.cloudfront.net/asset/image/email-banner-384-2x.png]<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.qualys.com%2Femail-banner&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236412070%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=i6iyfyznr%2B%2BaLc06o4EvkWWtizYYYqTYaW2ef6uUpao%3D&reserved=0>



This message may contain confidential and privileged information. If it has been sent to you in error, please reply to 
advise the sender of the error and then immediately delete it. If you are not the intended recipient, do not read, 
copy, disclose or otherwise use this message. The sender disclaims any liability for such unauthorized use. NOTE that 
all incoming emails sent to Qualys email accounts will be archived and may be scanned by us and/or by external service 
providers to detect and prevent threats to our systems, investigate illegal or inappropriate behavior, and/or eliminate 
unsolicited promotional emails ("spam"). If you have any concerns about this process, please contact us.

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236422066%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=wShV1kFbvQrYij0H7I7giXf4d9diizj7himi1fYlgMk%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community