Qlik NPrinting cannot send emails after enabling multi-factor authentication for Microsoft SMTP servers

[Andrea_Bertazzo]

Microsoft is disabling Basic Authentication for all Microsoft 365 Tenants. Multifactor Authentication is now mandatory.

Currently, Qlik NPrinting cannot connect to the Microsoft SMTP server with Multifactor Authentication. The email sending fails with this  error message:

Failed to send email for user 'user.name' {user-id-xxxx-xxx-xxxxxxx}. ERROR: AuthenticationInvalidCredentials: 5.7.139 Authentication unsuccessful, user is locked by your organization's security defaults policy. Contact your administrator.

Resolution

The supported solution is to use another SMTP server.

The problem with multifactor authentication is common to different programs. In case it is not possible to use a different SMTP server, see Microsoft's instructions on how to disable Multi Factor Authentication for all users:  How can we disable Multi Factor Authentication to all users in our Office 365?.

Qlik does not recommend disabling multi factor authentication as to maintain the security and integrity of your environment. Qlik is not responsible for any security problems related to this change. Discuss with your IT team before applying it.

If you decide to proceed disabling multi-factor authentication, please, do this only for the Qlik NPrinting services user.

Cause

Qlik NPrinting does not support Multi Factor Authentication for the Microsoft SMTP server. This feature is not currently on the road map.

Environment

Qlik NPrinting all supported versions.

[p_verkooijen]

Do not disable multi-factor authentication, Microsoft an Google provide an App password option for clients that cannot use MFA. 

Microsoft Office 365

https://support.microsoft.com/en-us/account-billing/using-app-passwords-with-apps-that-don-t-support...

Google G-Suite

https://knowledge.workspace.google.com/kb/how-to-generate-an-app-passwords-000009237

I would not recommend Microsoft smtp.office365.com, it has limits that conflict with the way NPrinting sends mails. Has sereval client hitting these limits.

• Only three concurrent connections to our service per mailbox will be allowed, 30 messages per minute or 10,000 recipients per day. NPrinting sends all mails at once instead of queuing them. 
• See community support article
• ERROR: 4.3.2 STOREDRV.ClientSubmit; sender thread limit exceeded 
• No way to change the setting (this idea has been closed)

You can use Microsoft 365 /Office 365 SMTP relay 

How to setup direct send: yourdomain.mail.protection.outlook.com

• Microsoft 365 or Office 365 SMTP relay does not require the use of a licensed Microsoft 365 or Office 365 mailbox to send emails.
• Microsoft 365 or Office 365 SMTP relay has higher sending limits than SMTP client submission; senders are not bound by the 30 messages per minute or 10,000 recipients per day limits.

Google Workspace has his own limits

• Gmail sending limits in Google Workspace