Deprecation of basic authentication for Exchange Online and Gmail

[Sonja_Bauernfeind]

Google and Microsoft deprecated basic authentication for their email services in 2022. Both companies consider Basic authentication as an outdated industry standard, and thus they are suggesting its customer move to OAuth 2.0 token-based authorization.

On May 7, 2024, we introduced OAuth2 authentication for the Microsoft 365 email provider

What has changed?

Microsoft – Outlook: Starting on October 1, 2022, Basic authentication was disabled for Outlook, EWS, RPS, POP, IMAP, and EAS protocols in Exchange Online. SMTP Auth will be an exception and will only be disabled if it is not being used, when it comes to new tenants it will be a configurable parameter disabled by default. Meaning that applications that already use SMTP Auth won’t be affected by these changes and users who want to keep using SMTP Auth will be able to do it. (Source)

Google – Gmail: Starting with May 30, 2022, Google no longer supports Basic authentication and “Less secure app access” option will disappear from the google account management console if it’s not being used. (Source)

 

What are Qlik's plans for the future?  

Both Google and Microsoft have restrictive rate limits in play for their cloud services.
For that reason, Qlik recommends using a bulk e-mail service such as Sendgrid, Mailchimp, or Mailgun. These services provide purpose-built solutions to handle the volume alerting and reporting solutions produce.

On May 7, 2024, we introduced OAuth2 authentication for the Microsoft 365 email provider. Keep Microsoft's API limits in mind before choosing your email provider. This includes requests per minute, concurrent requests, and size restrictions. Example: a capability such as Tabular Reporting can create large files as part of its reporting job creation, which may exceed Microsoft's service limits.

Qlik is currently investigating OAuth2 as an authorization scheme for SMTP from bulk mail solutions.

Want to know more about these changes?

Deprecation of Basic authentication in Exchange Online (Microsoft)
Less secure apps & your Google Account (Google)

Related Content:

Tutorial: use Sendgrid bulk email service SMTP with Qlik Cloud Services and Qlik Application Automat... 

[p_verkooijen]

Hi @Sonja_Bauernfeind any news regarding 

• Qlik is currently investigating OAuth2 as an authorization scheme for SMTP from bulk mail solutions.

---

---

 Get this error_message using the IMAP connector

Error connecting to IMAP server (AUTHENTICATE failed (NO).)

All seems to be related to the deprecation of basic auth.

[Sonja_Bauernfeind]

@p_verkooijen

Not as of yet. Should this be crucial for your implementations I would like to recommend getting in touch with your Account Manager to see how Qlik can best assist you achieve the outcome you want.

All the best,
Sonja

[p_verkooijen]

Hi @Sonja_Bauernfeind got IT to enable basic auth for now.

Why is this taking so long to investigate, the Dynamics/Sharepoint/Outlook365 are already using Oauth2

On the date this post was created OAuth2 support for IMAP/SMTP and POP has been available for over 2 years.

https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-oauth-2-0-support-for-imap-and-...

[David_Friend]

@p_verkooijen I saw your post and I've reached out to our NPrinting R&D to get more details on why this not yet been implemented, I'll post here when I hear back from them thanks!

[p_verkooijen]

Hi @David_Friend,

My issues are referring to the Webconnectors. NPrinting could have issues using the SMTP with basic auth.

[Bryan0605]

Is there any update about Oauth for SMTP ?

[Sonja_Bauernfeind]

Hello @Bryan0605 

I would recommend logging an idea in our ideation forum to give this more visiblity.

One exists for Qlik Cloud, which you can vote on already: oAuth authentication for SMTP on SaaS

All the best,
Sonja 

[p_verkooijen]

Hi, any updates ?

[Sonja_Bauernfeind]

As of right now, this statement would still be accurate:

Qlik follows Google's and Microsoft's recommendations not to use their services for bulk emailing.

We've put together two articles covering two services:

How to use Sendgrid bulk email service SMTP with Qlik Cloud Services and Qlik Application Automation 
How to use Mailchimp bulk email service SMTP with Qlik Cloud Services and Qlik Application Automatio... 

The idea mentioned above is still open, I would suggest reviewing if you can give it more priority on your end using our new idea portal: oAuth authentication for SMTP on SaaS

All the best,
Sonja 

[SDT]

We have been dealing with a crippled Qlik Tenant since we moved to Cloud over a year ago.

Should we move back to on-premise to get back these features?

@Sonja_Bauernfeind - Individual alerts set up by users are not bulk emailing. We need to the ability to use OAuth2 with Office365 email for subscriptions and alerting. Every other web based software we use has OAuth2 ability to email on our office 365. There have been zero problems with restrictive rate limiting.