idea Support Modern Auth for Office 365 in Enterprise email configuration in ArcGIS Enterprise Ideas

Support Modern Auth for Office 365 in Enterprise email configuration

CarlosBarahona — Sat, 05 Aug 2023 02:03:33 GMT

Modern email is moving away from basic authentication for SMTP. This means email services like Office 365 and Google are recommending to disable basic auth in favor of MS Modern Authorization and Google 2-Step Verification. Unfortunately, ArcGIS Portal does not currently support these authentication types making it impossible to configure email settings for ArcGIS Enterprise. That also means organizations relying on email services with basic authentication disabled cannot enable multifactor authentication in ArcGIS Enterprise, as enabling MFA requires email be configured for Portal.

Re: Support Modern Auth for Office 365 in Enterprise email configuration

Scott_Tansley — Sun, 06 Aug 2023 21:58:57 GMT

Seconded. Currently have a client that insists on MFA for all external facing services, but basic auth is a considered a bigger security risk than not having MFA. Most clients now using M365 and exchange online services.

Re: Support Modern Auth for Office 365 in Enterprise email configuration

sodtom — Mon, 07 Aug 2023 12:54:04 GMT

Note! Configuring, activating and using the MFA doesn't require a working configuration of SMTP settings in place - to activate MFA, just define some SMTP setting. Naturally, if you want the whole package to work smoothly (e.g forgot password functionalities etc.) you should use correct SMTP (e.g. dedicated application account from Google) - you may also always define the sender (from) in the configuration regardless of the SMTP provider.

Re: Support Modern Auth for Office 365 in Enterprise email configuration

CV_Frank — Wed, 23 Aug 2023 21:42:30 GMT

The organization that I work for is requesting thsi to be setup.

We did not have Security Defaults enabled (Requirement for MFA, etc)

But it still DID NOT work.

Further, we even enabled security defaults, and MFA for the account we are going to use for this function. So we generated an APP PASSWORD, still did not work.

Re: Support Modern Auth for Office 365 in Enterprise email configuration

CV_Frank — Wed, 23 Aug 2023 23:13:48 GMT

Okay, we got this one figured out.

We used the DIRECT SEND method from this MS Article - How to set up a multifunction device or application to send email using Microsoft 365 or Office 365 | Microsoft Learn

Specifically this option - https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#option-2-send-mail-directly-from-your-printer-or-application-to-microsoft-365-or-office-365-direct-send

We entered our MX Record in the server field, Port 25, StarTLS, and as the email address, we used the ArcGIS account that is licensed (EOP1) and NO SMTP AUTH and were able to send test e-mails successfully.