Feature Requests
Share ideas, discuss and vote on requests from other users in community
 

additional authentication options for POP3 Exchange Online

Ron Randasche shared this idea 1 year ago
Under Consideration

we use office365 Exchange Online for our helpdesk email account.

WHMCS helpdesk retrieves these mails via pop3 authenication.

Microsoft has announced the retirement of Basic Authentication for EWS, EAS, IMAP, POP and RPS to access Exchange Online.

Beginning October 13, 2020, we will retire Basic Authentication for EWS, EAS, IMAP, POP and RPS to access Exchange Online. Note: this change does not impact SMTP AUTH. There are several actions that you and/or your users can take to avoid service disruptions on client applications, and we describe them below. If no action is taken, client applications using Basic Authentication for EWS will be retired on October 13, 2020. Any application using OAuth 2.0 to connect to these protocols, will continue to work without change or interruption.

Please implement OAuth 2.0 in WHMCS to access these mailboxes after October 13, 2020

Comments (5)

photo
1

Hi there,

We too have seen this announcement (Google is planning something similar for G-Suite as well).

We are tracking this internally to look at addressing it in 2020.

photo
1

Where did this get to?

photo
1

It continues to be on our radar Riley J, Microsoft have delayed the decommissioning for existing customers due to COVID-19 however this is still something we will address alongside G-Suite.

photo
photo
1

This is urgent as google suite will remove user/pass soon and there will be no chance to pipe pop3 emails to whmcs without oauth anymore

photo
1

Hi there,

The latest update from Microsoft is that the switchover has been pushed back to the second half of 2021, and that current implementations will continue to work until that time: https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-april-2020-update/ba-p/1275508

We've made inroads into implementing SMTP OAuth Authentication (sending emails) for Office365, as that was the item with the closer deadline. However Microsoft's documentation is in a state of flux at present, and none of the 3 different methods appeared to be production ready during our research. As such we're pausing this work until Microsoft's APIs stabilise.

In the meantime we have completed implementation of SMTP OAuth Authentication for GSuite in WHMCS v8.0. The framework is in place on our side, so we can potentially move quicker further down the road when Microsoft picks a route!