Last modified: 2024-05-24

Deprecation of Basic Authentication in Microsoft Exchange Online

This topic describes simple steps that you must take to prevent a disruption in the email notifications that OneSpan Sign sends to your account's signers. If you did not take these steps before December 31, 2022, your email notifications may have stopped working.

On October 1, 2022, Microsoft began disabling Basic Authentication in Exchange Online. According to Microsoft, the risks and threats posed by Basic Authentication are now such that Exchange Online needs to adopt a more secure authentication method.

How does this impact me?

OneSpan Sign relies on Exchange Online to send its outgoing email notifications to signers. Thus on December 31, 2022, all email notifications to your account's signers may stop working.

What do I need to do?

To ensure that your signers continue to receive OneSpan Sign's email notifications without interruption, the following procedure must have been completed BEFORE December 31, 2022.

To prevent a disruption in your account's email-notification service:

  1. Sign in to the Azure portal.
  2. Click Azure Active Directory.
  3. Select App registrations, and then click New Registration.
  4. Input any Name, and select Accounts in this organizational directory only. Click Register.
  5. On the Overview page, note the Client ID and Tenant ID. These will be needed in this procedure's last step.
  6. On the Authentication page, change Allow public client flows to Yes. Click Save.
  7. On the API permissions page, delete the existing permission.
  8. Click Add a permission, and select Microsoft Graph.
  9. Select Delegated permissions.
  10. Locate and add the following permissions:
    • IMAP.AccessAsUser.All
    • offline_access
    • SMTP.Send
  11. Click Grant admin consent for <name>, where <name> is the name you used for the new app registration.
  12. Contact our Support Team to create a support ticket. You will need the following information:

    During this step you will be asked to provide your Microsoft Azure password. We recommend that you contact our Support Team directly to provide this information.



    Host Name

    Name of the SMTP server to connect to

    Port Number

    Port that the SMTP server is listening on


    Microsoft Azure account username of the customer


    Microsoft Azure account password of the customer

    Client ID

    Unique identifiers that the customer receives after configuring the Azure account for OAuth2 authentication

    Tenant ID

    Unique identifiers that the customer receives after configuring the Azure account for OAuth2 authentication

    “From” email address

    This will be displayed as the sender's email address

    Display Name

    This will be displayed as the email sender's name

Once our Support Team has this information, they will configure your OneSpan Sign account to ensure that its email-notification service is not disrupted. For more immediate attention to this time sensitive matter, we recommend that once you have submitted this information that you call our Support Team directly.


Was this information helpful?