Deprecation of Basic Authentication in Microsoft Exchange Online
This topic describes simple steps that you must take to prevent a disruption in the email notifications that OneSpan Sign sends to your account's signers. If you didn't take these steps before October 1, 2022, those email notifications may have stopped working.
On October 1, 2022, Microsoft began disabling Basic Authentication in Exchange Online. According to Microsoft, the risks and threats posed by Basic Authentication are now such that Exchange Online needs to adopt a more secure authentication method.
How does this impact me?
OneSpan Sign relies on Exchange Online to send its outgoing email notifications to signers. Thus on October 1, 2022, all email notifications to your account's signers may have stopped working.
What do I need to do?
To ensure that your signers continue to receive OneSpan Sign's email notifications without interruption, the following procedure must have been completed BEFORE OCTOBER 1, 2022.
To prevent a disruption in your account's email-notification service:
- Sign in to the Azure portal.
- Click Azure Active Directory.
- Select App registrations, and then click New Registration.
- Input any Name, and select Accounts in this organizational directory only. Click Register.
On the Overview page, note the Client ID and Tenant ID. These will be needed in this procedure's last step.
- On the Authentication page, change Allow public client flows to Yes. Click Save.
- On the API permissions page, delete the existing permission.
- Click Add a permission, and select Microsoft Graph.
- Select Delegated permissions.
- Locate and add the following permissions:
- Click Grant admin consent for <name>, where <name> is the name you used for the new app registration.
- Contact our Support Team. They will provide you with a secure way to give them your:
- Azure account username and password
- Client ID
- Tenant ID
Once our Support Team has this information, they will configure your OneSpan Sign account to ensure that its email-notification service is not disrupted.