Re: MS Deprecation Basic Authentication

["Menne, Michael S" <michael.menne () MNSU EDU>]

We deployed MFA earlier this year. We had a report generated for those that will still using Legacy Authentication 
(1.5% of our total account base). We granted them a two week exception at the end of our MFA project and notified them 
with instructions to remediate the issue. 60% of the exceptions were iOS users.  We gave them two weeks, then turned 
off legacy auth for users all together.  It was a non-issue for 99% of the users. They either reconfigured their 
existing mail client or switched to Outlook.

We support Outlook primarily, but have instructions for the Mail app on iOS. MFA/Modern Auth is supported on the latest 
versions of Thunderbird for anyone running Linux..  Anything outside of Outlook is best effort support.

Michael Menne, CISSP
Chief Information Security Officer
IT Solutions Information Security
Minnesota State University, Mankato
Phone:  (507) 389-5705
Cell: (507) 405-0717
https://mankato.mnsu.edu/cyberaware

[signature_411728627]

Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Barton, Robert W. 
<bartonrt () LEWISU EDU>
Date: Thursday, August 26, 2021 at 10:07 AM
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] MS Deprecation Basic Authentication
Morning,

Q2 of this year, Microsoft was scheduled to deprecate basic authentication in M365.  It has been postponed for now.  
But this just gives tenants more time to address the apps/people using older protocols.  For those using Apple 
products, it seems that IMAP, SMTP, and POP are common, and the products have no updates/upgrades to be found to 
address this coming issue.  If you had these products in the mix, what did you move to?  Did you force people to move 
to OUTLOOK.COM?  Some people are reticent to move to a MS product, so I figured others may have already had this dance 
with staff and faculty, and maybe had an answer.

Yes, IT was more distributed previously, and this is a pain point of centralizing.

Robert W. Barton
Executive Director of Information Security & Policy
Lewis University
1 University Parkway
Romeoville, IL  60446-2200
815-836-5663

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C6e36ed88e88e423c40f108d968a326b4%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637655872209286954%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=t80OekOTojcjCplU3ecmhObcEvIjB4W1NjinkBjP9fM%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community