Making the Move From Basic Authentication

Monday 05/09/2022

Currently, applications such as Mac Mail, Thunderbird, Outlook and some mobile device mail accounts still support basic authentication. Basic authentication makes it easier for hackers to capture your credentials, which in turn can be used to log in to other services. 

With these threats in mind, Microsoft is taking steps to improve security by removing basic authentication. To get ahead of the change, FSU will be removing basic authentication in 2022, before the official removal by Microsoft. 

Depending on what client and version you are using, you will need to do one of the following: 

  • Stop using all older versions of Thunderbird, Mac Mail, Office, iOS and mobile phone applications  

  • Transition to using applications that support modern authentication 

  • Understand that certain account configurations will not work anymore and will need to be reconfigured, including iOS calendars 

  • Update your Outlook app to the most modern version if possible.   

  • Install the latest versions of iOS and mobile phone email applications

    • If you are using the iOS email application, go into your phone settings, delete your account connection and then re-add the account using the Outlook.com sign-in method

  • Work with vendors to transition generic accounts that use basic authentication to applications that support modern authentication. Generic accounts are typically service accounts not linked to a specific user that are used to check shared mailboxes. These applications need to support modern authentication or transition to an application that does.  

  • If you are unsure how to transition to using applications that support modern authentication, please contact the FSU ITS Service Desk 

Keep in mind you will need to make these changes on all devices currently using basic authentication. 

By making the move away from basic authentication, FSU is improving security and working towards meeting industry standards before the official removal by Microsoft later this year. 

To learn more about basic authentication, visit the Microsoft site.