This is logical because basic authentication was the only connection possible at the time. In a nutshell, the correct position is that if an account for Exchange was created on an iOS or iPadOS email app before Apple added support for OAuth (iOS 12), the connection uses basic authentication. Everything seems sunny, until you learn that some of the information presented in the documentation is incorrect (Apple has been informed and is apparently in the process of refreshing their content. The good thing is that Apple has done the work to make sure that the iOS mail client (and its MacOS counterpart) can use modern authentication to connect to Exchange Online. Checking Apple’s documentation, we learn that Apple has made arrangements to upgrade devices running iOS 14 and iPadOS 14 to use modern authentication automatically (Figure 1).įigure 1: Apple documentation about OAuth support in iOS for Exchange Online The Apple iOS mail app uses EAS to connect to Exchange, and EAS is one of the protocols that won’t support basic authentication after October 2022. It’s a better mail client for Exchange Online as it supports features like delegated access, sensitivity labels, and shared mailboxes. Despite being an iPhone user, I prefer Outlook mobile. The Apple iOS mail app is a popular email client for both Exchange Server and Exchange Online. The report also notes that “ Office 365 accounts with multifactor authentication (MFA) enabled are resilient against password sprays.” Apple iOS Mail App and Modern Authentication The continuing activities of groups using password spray attacks against Office 365 tenants such as DEV-0343 (reported by the M i crosoft Threat Intelligence Center on October 11) underline the real threat which exists for accounts when basic authentication is supported for protocols like Exchange ActiveSync. It’s a big project which will require upgrading email clients to use modern authentication to connect to mailboxes. Ongoing Threat Underlines Need to Remove Basic Authentication from Exchange Onlineīy now, the realization that Microsoft will remove basic authentication for many email connection protocols in October 2022 should have sunk into the minds of everyone involved in running Exchange Online. A Point on the Road to Modern Authentication.Device Partnerships and Registered Devices.Apple iOS Mail App and Modern Authentication.Ongoing Threat Underlines Need to Remove Basic Authentication from Exchange Online.

Apple mail vs outlook webmail