1. Home
  2. EOL for Exchange Online Basic Authorization

EOL for Exchange Online Basic Authorization

The final deadline for disabling Basic Authorization in Exchange Online has been set for October 1st, 2022. After postponing the timeline for turning off Basic Authorization numerous times, the final deadline was set on February 25, 2021.

More information about the timeline and delays can be found here:

https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-september-2021-update/ba-p/2772210

What Does It Mean For Exoprise Exchange Sensors

Exoprise supports many access methods for testing Exchange Online performance, availability, mail flow and more. As such, all the Exoprise CloudReady synthetic sensors for Exchange have been upgraded for more 2 years. This means that customers can utilize OAuth for their Exchange testing instead of basic credentials.

Customers should ensure that their Exchange Online sensors are no longer utilizing Basic Authorization.

Exoprise PowerShell Management API Updates

Exoprise recently expanded the PowerShell Management API to support setting and updating OAuth credentials for sensor types that take OAuth credentials, including the following Email sensor types:

  • Exchange Online
  • ActiveSync
  • FreeBusy
  • Outlook Web Access

This is not the full list of sensors that support OAuth, but the affected Exchange Online sensors.

Read more about the PowerShell Management API

To update Exchange Online monitoring sensors, you have to perform the following steps:

  1. Sign in to the Exoprise Portal
  2. Navigate to the OAuth management page: Admin > Settings > OAuth
  3. Create separate OAuth registrations for each account, permissions, and access method. Exoprise uses granular permissions for each OAuth registration, rather than broad permissions across an account. This is more secure.
    • Give each OAuth registration a unique label. You will use this label to set the OAuth registration from the PowerShell API.
    • You have accepted or created an OAuth registration, first, before you can use the API. There’s no way to create and/or accept OAuth registrations with an API. That’s OAuth.

Edit Sensors Updates

Exoprise recently updated the Edit Sensors page with bulk support for setting and updating OAuth credentials. This change, along with the capability to configure OAuth credentials via PowerShell, enables customers to update the environment before the October deadline.

To update Exchange Online monitoring sensors, you have to perform the following steps:

  1. Sign in to the Exoprise Portal
  2. Navigate to the OAuth management page: Admin > Settings > OAuth
  3. Create separate OAuth registrations for each account, permissions, and access method. Exoprise uses granular permissions for each OAuth registration, rather than broad permissions across an account. This is more secure.
    • Give each OAuth registration a unique label. You will use this label to set the OAuth registration from the PowerShell API.
    • You have accepted and/or created an OAuth registration, first, before you can use the API. There’s no way to create and/or accept OAuth registrations with an API. That’s OAuth.
  4. Navigate to the Edit Sensors page, click Change OAuth Authorizations
    Change OAuth Authorization Drop Down
  5. Choose the different OAuth registration type to filter the list of possible sensors
  6. Choose the sensors you would like to change and click Apply
  7. On the following page, finalize the sensors that you want to change and click Save Changes

Update Your Sensors Before the October 1st, 2022 Deadline

Make sure to update your sensors and migrate from Basic Authorization to OAuth Authorization before the October 1st, 2022 deadline and contact us with any questions you might have.