Using Basic Authentication in Exchange?

by Aug 29, 2022

Using Basic Authentication in Exchange? From Okt 1 that will not be possible anymore!

Someone that has been looming for a while is happening starting from Oktober 1: Depreciation of Basic Authentication in Exchange Online.

See the blog post of the Exchange team for tips and how to see if you are affected:

https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-deprecation-in-exchange-online-may-2022/ba-p/3301866?WT.mc_id=AZ-MVP-5003249

What is Basic Auth?

It is one of the simpelst way of authentication using an Authorization header in your HTTP request. The header contains the word Basic, followed by a space and a base64-encoded string username: password.

For example, to authorize as username / Pa$$w0rd the client would send:

Authorization: Basic AXVubzpwQDU1dzByYM==

Base64 encoding does not mean encryption or hashing! You can reverse encode it! So, you are basically sending your credentials as clear text over the line!!! That is why it isn’t a safe way if the connection is not encrypted. So always use an HTTPS connection when using this or much better use a different authentication method.

#

Subscribe to
The Daily Friction

A daily newsletter on automation and eliminating friction

Related Content

Scrum conceals bad teams.

Scrum conceals bad teams. Far too often, we confuse Scrum with a magic wand that transforms any team into a high-performing 'dream team'. It's tempting to believe that the sprint system, with its regular completion and initiation of tasks, gives us an agile and...

read more

🚀 Process Automations in Microsoft Loop!

🚀 Process Automations in Microsoft Loop! Now you can create Power Automate-backed rules to streamline repetitive tasks in your Loop table. See https://insider.microsoft365.com/en-us/blog/streamline-your-workflow-with-automation-in-microsoft-loop Loop is slowly...

read more

You don’t control the truth in Production!

You don't control the truth in Production! Now a days multiple teams/projects are working on the same Dataverse production environment. So thinking you can manage the complete production truth in your ALM pipeline is strange. Not every environment is 💯 equal to...

read more
Share This