Microsoft is phasing out Basic Authentication for the higher security standards of Modern Authentication.

When Microsoft’s mandated disablement occurs, any email application that uses Basic Authentication will no longer work properly. To reduce the impact of this change, University Information Services will proactively migrate identified Basic Authentication users and will require Modern Authentication to access Microsoft Office 365 on Oct. 23, 2022.

This is an extension granted by Microsoft for extending specific Basic Authentication protocols still in use by accounts. The protocols still in use by UIS have been extended for the remaining accounts still using them. Other unused Basic Authentication protocols already disabled by Microsoft due to inactivity will remain disabled.

Additionally, in December 2022, Microsoft plans to cease supporting applications using Active Directory Authentication Libraries (ADAL) and Azure AD Graph.

Any department or employee using email accounts or applications with Basic Authentication should reach out to modernauthentication@cu.edu to coordinate transition plans.

Who will be affected?

Most CU System employees will not be impacted as Microsoft 365 already prefers Modern Authentication and most users have already switched. The Office 365 Outlook Web App will not be affected. 

You may be affected if you are using a third-party email application, such as Thunderbird, Eudora, PINE or Apple Mail, or running an outdated application.

If you are using a Microsoft Outlook application for your laptop or desktop, we suggest using Microsoft 365 Outlook. Outlook 2016 and Outlook 2013 might still use basic authentication features.

Outlook mobile apps for iOS and Android are fully compatible with Microsoft’s secure login requirement and no action is needed.

How can I ensure my mobile device is using Modern Authentication to access Outlook?

If your mobile device is updated (iOS 15.6 and higher), then you should not encounter any issues. For information on which iOS versions support Modern Authentication, visit Integrate Apple.

If you are using an older android or Apple device that can not update, we recommend using the Microsoft Outlook mobile app. This provides the best compatibility with the Microsoft 365 service. Simply search for and install the Microsoft Outlook app from the Google Play store or Apple App store. 

To remove the old profile in IOS/iPadOS: Tap on Settings > Mail > Accounts > tap on your old account > Delete Account.

To add a new profile in IOS/iPadOS: Tap on Settings > Mail > Accounts > Add Account > Microsoft Exchange > Enter your e-mail address then follow the prompts. Choose Sign In. Do not choose to configure manually.

Each Android device has its own stock e-mail app. Many do not support modern authentication; therefore, the Microsoft Outlook app in the Google Play store is the recommended client for all Android devices.

How do I get help?

For assistance in upgrading your email application to a newer version of Outlook or other Microsoft applications, please contact help@cu.edu.

Any department using email accounts or applications that use Basic Authentication and that require additional assistance — beyond upgrading their Microsoft Outlook application — should reach out to modernauthentication@cu.edu to coordinate transition plans.

What is the difference between Basic and Modern Authentication?

Basic Authentication (also known as legacy authentication) relies on sending usernames and passwords with every request, increasing the risk of attackers abusing users’ credentials.

Modern Authentication offers several authentication alternatives that do not rely on the basic exchange of username and password, such as OAuth and SAML. Modern Authentication eliminates some of the risks associated with the exchange of a username and password every time a user needs to authenticate.

This change is happening to better protect your accounts.

Where can I learn more?

• Basic Authentication Deprecation in Exchange Online
• Deprecation of Basic authentication in Exchange Online
• Migrate applications to the Microsoft Authentication Library (MSAL)
• Migrate Azure AD Graph to Microsoft Graph