Likewise, if you buy a new iOS device and restore your settings on that device from an iCloud backup of the old device, the restore preserves the mail app configuration. It’s not enough to upgrade to the latest version of iOS as this action preserves the mail app configuration. When the mail app running on iOS 12 or above adds an Exchange account, it detects that modern authentication is available and will use it. To move to modern authentication, users must remove their Exchange account from the mail app configuration and re-add Exchange to the mail app. This is logical because basic authentication was the only connection possible at the time. In a nutshell, the correct position is that if an account for Exchange was created on an iOS or iPadOS email app before Apple added support for OAuth (iOS 12), the connection uses basic authentication. Everything seems sunny, until you learn that some of the information presented in the documentation is incorrect (Apple has been informed and is apparently in the process of refreshing their content. The good thing is that Apple has done the work to make sure that the iOS mail client (and its MacOS counterpart) can use modern authentication to connect to Exchange Online. Checking Apple’s documentation, we learn that Apple has made arrangements to upgrade devices running iOS 14 and iPadOS 14 to use modern authentication automatically (Figure 1).įigure 1: Apple documentation about OAuth support in iOS for Exchange Online The Apple iOS mail app uses EAS to connect to Exchange, and EAS is one of the protocols that won’t support basic authentication after October 2022. ![]() It’s a better mail client for Exchange Online as it supports features like delegated access, sensitivity labels, and shared mailboxes. Despite being an iPhone user, I prefer Outlook mobile. The Apple iOS mail app is a popular email client for both Exchange Server and Exchange Online. The report also notes that “ Office 365 accounts with multifactor authentication (MFA) enabled are resilient against password sprays.” Apple iOS Mail App and Modern Authentication The continuing activities of groups using password spray attacks against Office 365 tenants such as DEV-0343 (reported by the M i crosoft Threat Intelligence Center on October 11) underline the real threat which exists for accounts when basic authentication is supported for protocols like Exchange ActiveSync. It’s a big project which will require upgrading email clients to use modern authentication to connect to mailboxes. ![]() Ongoing Threat Underlines Need to Remove Basic Authentication from Exchange Onlineīy now, the realization that Microsoft will remove basic authentication for many email connection protocols in October 2022 should have sunk into the minds of everyone involved in running Exchange Online. A Point on the Road to Modern Authentication.Device Partnerships and Registered Devices.Apple iOS Mail App and Modern Authentication.Ongoing Threat Underlines Need to Remove Basic Authentication from Exchange Online.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |