Deprecation of Basic Authentication in Microsoft Exchange Online

This topic describes simple steps that you must take to prevent a disruption in the email notifications that OneSpan Sign sends to your account's signers. If you did not take these steps before December 31, 2022, your email notifications may have stopped working.

On October 1, 2022, Microsoft began disabling Basic Authentication in Exchange Online. According to Microsoft, the risks and threats posed by Basic Authentication are now such that Exchange Online needs to adopt a more secure authentication method.

How does this impact me?

OneSpan Sign relies on Exchange Online to send its outgoing email notifications to signers. Thus on December 31, 2022, all email notifications to your account's signers may stop working.

What do I need to do?

To ensure that your signers continue to receive OneSpan Sign's email notifications without interruption, the following procedure must have been completed BEFORE December 31, 2022.

To prevent a disruption in your account's email-notification service:

1. Sign in to the Azure portal.
2. Click Azure Active Directory.
3. Select App registrations, and then click New Registration.
   
4. Input any Name, and select Accounts in this organizational directory only. Click Register.
   
5. On the Overview page, note the Client ID and Tenant ID. These will be needed in this procedure's last step.
   
6. On the Authentication page, change Allow public client flows to Yes. Click Save.
   
7. On the API permissions page, delete the existing permission.
8. Click Add a permission, and select Microsoft Graph.
9. Select Delegated permissions.
10. Locate and add the following permissions:
    • IMAP.AccessAsUser.All
    • offline_access
    • SMTP.Send
11. Click Grant admin consent for <name>, where <name> is the name you used for the new app registration.
12. Contact our Support Team to create a support ticket. You will need the following information:

    During this step you will be asked to provide your Microsoft Azure password. We recommend that you contact our Support Team directly to provide this information.

    Setting	Description
    Host Name	Name of the SMTP server to connect to
    Port Number	Port that the SMTP server is listening on
    Username	Microsoft Azure account username of the customer
    Password	Microsoft Azure account password of the customer
    Client ID	Unique identifiers that the customer receives after configuring the Azure account for OAuth2 authentication
    Tenant ID	Unique identifiers that the customer receives after configuring the Azure account for OAuth2 authentication
    “From” email address	This will be displayed as the sender's email address
    Display Name	This will be displayed as the email sender's name

Once our Support Team has this information, they will configure your OneSpan Sign account to ensure that its email-notification service is not disrupted. For more immediate attention to this time sensitive matter, we recommend that once you have submitted this information that you call our Support Team directly.