Educause Security Discussion mailing list archives
Re: MS Deprecation Basic Authentication
From: "Barton, Robert W." <bartonrt () LEWISU EDU>
Date: Thu, 26 Aug 2021 16:22:04 +0000
"That’s not to say that when you are in Office 365 ecosystem already, why not use Outlook - for easier support, consistent user experience (centrally managed add-ons), and security capabilities (remote wipe). Outlook for Mac and Outlook Mobile came a long way and are feasible options now." I'm running into Apple mail and such, but several other clients that people have been using for years (3 different others so far). I've been asked to take a 'soft hand' approach with this change. But if people have found issues with this...have compelling arguments...I want to hear it. Robert W. Barton Executive Director of Information Security & Policy Lewis University 1 University Parkway Romeoville, IL 60446-2200 815-836-5663 ________________________________ From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Dmitry Vayntrub <dmitry () SFSU EDU> Sent: Thursday, August 26, 2021 10:56 AM To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU> Subject: Re: [SECURITY] MS Deprecation Basic Authentication Modern versions of major non-MS email clients do now support Modern Auth (Oauth) – including Apple Mail and Gmail clients. It would require to recreate profile if the original one was created with Basic Authentication, but those clients can still be used unless you disable all protocols but MAPI. That’s not to say that when you are in Office 365 ecosystem already, why not use Outlook - for easier support, consistent user experience (centrally managed add-ons), and security capabilities (remote wipe). Outlook for Mac and Outlook Mobile came a long way and are feasible options now. Thank you, Dmitry Vayntrub Sr. Director, Cloud and Systems Services Information Technology Services San Francisco State University From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Shane Kroening Sent: Thursday, August 26, 2021 8:40 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] MS Deprecation Basic Authentication Hi Robert, I can empathize and understand the perspective of people preferring to use Apple Mail and not wanting to move to Outlook for Mac given its history. Unfortunately, the reality (as you noted) is that they don’t really have a choice and will need to use Outlook for Mac or the online web access. I’ve seen several universities and businesses be successful in transitioning by informing people early on and making sure they realize that the latest version of Outlook for Mac has come a long way from it’s not-so-humble beginnings. Best, Shane Kroening [signature_796095325] <https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fqualys&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236392087%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=dmMRdHwqYz%2BHqHyVvkRdVkVJHDi%2FIVmcRSqeNztKX1k%3D&reserved=0> Technical Account Manager, Pre-Sales, Central (SLED) skroening () qualys com<mailto:skroening () qualys com> 414.791.5674 Qualys, Inc. – Blog<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fqualys.com%2Fblog&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236402077%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ENAlJnGR%2F9KGg6vYb8o5t9V1Hdmz87p%2Bwuuh8LyPxIw%3D&reserved=0> | Community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.qualys.com%2F&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236402077%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=NLuv2LRS95IAbuv1vkfzIJNNscKh0%2BpPnf0CkQ2pTsg%3D&reserved=0> | Twitter<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fqualys&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236402077%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=9F%2BExl6Br5VZdF6oHySjXKYLe9FK4jxclBs84JecMKI%3D&reserved=0> Schedule a Call<https://outlook.office365.com/owa/calendar/ShaneKroening () qualys onmicrosoft com/bookings/> From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of Barton, Robert W. <bartonrt () LEWISU EDU<mailto:bartonrt () LEWISU EDU>> Date: Thursday, August 26, 2021 at 10:07 AM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: [SECURITY] MS Deprecation Basic Authentication Morning, Q2 of this year, Microsoft was scheduled to deprecate basic authentication in M365. It has been postponed for now. But this just gives tenants more time to address the apps/people using older protocols. For those using Apple products, it seems that IMAP, SMTP, and POP are common, and the products have no updates/upgrades to be found to address this coming issue. If you had these products in the mix, what did you move to? Did you force people to move to OUTLOOK.COM? Some people are reticent to move to a MS product, so I figured others may have already had this dance with staff and faculty, and maybe had an answer. Yes, IT was more distributed previously, and this is a pain point of centralizing. Robert W. Barton Executive Director of Information Security & Policy Lewis University 1 University Parkway Romeoville, IL 60446-2200 815-836-5663 ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236412070%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=eiAGSQa0lD37NBWWYuwaCSFQ%2B6O4QzXtscz3cOvLdS4%3D&reserved=0> [https://d1dejaj6dcqv24.cloudfront.net/asset/image/email-banner-384-2x.png]<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.qualys.com%2Femail-banner&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236412070%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=i6iyfyznr%2B%2BaLc06o4EvkWWtizYYYqTYaW2ef6uUpao%3D&reserved=0> This message may contain confidential and privileged information. If it has been sent to you in error, please reply to advise the sender of the error and then immediately delete it. If you are not the intended recipient, do not read, copy, disclose or otherwise use this message. The sender disclaims any liability for such unauthorized use. NOTE that all incoming emails sent to Qualys email accounts will be archived and may be scanned by us and/or by external service providers to detect and prevent threats to our systems, investigate illegal or inappropriate behavior, and/or eliminate unsolicited promotional emails (“spam”). If you have any concerns about this process, please contact us. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cdmitry%40SFSU.EDU%7C120a24b8ef52470f88f708d968a7d088%7Cd8fbe335822c41a987747f16709aac9f%7C0%7C0%7C637655892236422066%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=wShV1kFbvQrYij0H7I7giXf4d9diizj7himi1fYlgMk%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- MS Deprecation Basic Authentication Barton, Robert W. (Aug 26)
- Re: MS Deprecation Basic Authentication Shane Kroening (Aug 26)
- Re: MS Deprecation Basic Authentication Dmitry Vayntrub (Aug 26)
- Re: MS Deprecation Basic Authentication Rich Graves (Aug 26)
- Re: MS Deprecation Basic Authentication Barton, Robert W. (Aug 26)
- Re: MS Deprecation Basic Authentication Dmitry Vayntrub (Aug 26)
- Re: MS Deprecation Basic Authentication William Horka (Aug 26)
- Re: MS Deprecation Basic Authentication Cole, Kade (Aug 26)
- Re: MS Deprecation Basic Authentication Julian Y Koh (Aug 26)
- Re: MS Deprecation Basic Authentication Cole, Kade (Aug 26)
- Re: MS Deprecation Basic Authentication Curt Kappenman (Aug 26)
- Re: MS Deprecation Basic Authentication Menne, Michael S (Aug 26)
- Re: [EXTERNAL] [SECURITY] MS Deprecation Basic Authentication Theodore J. August (Aug 30)
- Re: MS Deprecation Basic Authentication Shane Kroening (Aug 26)