exchange web services modern authentication

Modern authentication is an umbrella term for a combination of authentication and authorization methods between a client and a server. Microsoft is making this change to switch customers to Modern authentication. Basic authentication is an outdated industry standard and there are more effective user authentication alternatives including security strategies such as Zero Trust (Never Trust, Always Verify). Furthermore, the enforcement of multifactor authentication (MFA) is not simple or in some cases, possible when Basic authentication remains enabled. This can leave user credentials vulnerable to interception by attackers. Basic authentication sends a username and a password with every request and does not require TLS.

Starting October 1st, Microsoft will start to randomly select tenants and disable Basic authentication for Exchange Online.īasic authentication has been used by client applications for many years to connect to servers, services, and endpoints. Microsoft to Disable Basic Authentication for Exchange Online on OctoSeptem|

Exchange web services modern authentication