1. Home
  2. Sensors
  3. OAuth Sensors Setup

OAuth Sensors Setup

All email synthetic testing for Exchange Online or Microsoft Office 365 now requires Modern authentication (OAuth 2.0 token-based authentication). This is due to the deprecation of Basic Authentication by Microsoft for Exchange Online. You can read more about the deprecation on Microsoft’s site.

Token-based authentication such as OAuth 2.0 means you are giving limited access to user accounts via HTTP. It works by delegating account authentication to a service like Exchange Online, which authorizes third-party applications like Exoprise CloudReady synthetic sensors to access a specific user account that you allow. OAuth 2 provides authorization flows for web and desktop applications, as well as mobile devices.

NOTE: Important Information About Accounts and OAuth

For synthetic sensors and testing of Exchange Online, you should accept the OAuth registration on behalf of a test account and mailbox.

Accepting and OAuth registration does not alter permissions on the account. When prompted, sign in as the account you would like to test against.

How To Sign In And Accept an OAuth Registration

For testing email mailbox access, mail flow, Exchange mail queues, performance, and uptime, you will need to accept an Exoprise OAuth registration from within the Exoprise platform. Where possible, Exoprise has created different OAuth registrations for different email and Exchange protocols, including Exchange Web Services or Graph API.

Exchange Web Services, Exchange ActiveSync, Calendar Access

Microsoft added OAuth permissions to the Exchange Web Services (EWS) protocol, as well as Exchange Active Sync, essentially back porting OAuth authorization to protocols that did not originally support this type of authorization.

Exoprise CloudReady synthetic sensors utilize the same back ported permissions for Exhchange Online, ActiveSync and Calendar FreeBusy testing. This is the reason that there are a number of permissions requested.

There is a separate OAuth for the newer, OAuth native Email graph protocol. Exoprise intends to add tests and sensors that leverage the Graph API in the future.

Steps To Add an OAuth From Sensor Setup Wizards

Step 1. Enter a label for the OAuth setup
Step 1. Enter a label for the OAuth setup

 

Step 2. For the popup enter the account that you want to use for testing
Step 2. For the popup, enter the account that you want to use for testing.

 

Optionally, you may be prompted to use Single Sign On within your environment
Step 3. Optionally, you may be prompted to use Single Sign On within your environment

 

Step 4. Stay signed in if you plan to accept other OAuth registrations
Step 4. Stay signed in if you plan to accept other OAuth registrations.

 

Step 5. Permissions requested are just for the test account
Step 5. Permissions requested are just for the test account.

 

NOTE: These permissions are just for the account that you signed in with

Most of these permissions are required for testing mail flow and calendar access or as part of the act of signing in to access a mailbox.

Final Step. The OAuth setup is complete
Step 6. Final Step. The OAuth setup is complete.

Managing the OAuth Credentials Within Exoprise

You can separately manage the OAuth registrations within Exoprise by going to Admin > Settings > OAuth. The admin or owner role within Exoprise is required.

Related Articles