So, let´s switch to the Azure AD Workbooks section, which allows you to query using Log Analytics (Workbooks are available for Azure Active Directory tenants with P1 or P2 licenses as described here.)
The Azure AD Sign-in report doesn´t allow you to filter out EAS using certificate-based authentication. You can confirm the records are for certificate usage by opening the Authentication Details tab. However, this report will also include certificate-based authentication under the Legacy Authentication Clients filter.Įven though certificate-based authentication is considered strong authentication, Azure AD consider it ‘Legacy’ as it’s not using OAuth. Exchange Online has supported certificate-based authentication for EAS for a long time and this capability has been widely adopted. In this case, the report might have “tricked” you and we just want to clarify that a bit here. The report might give you a long list of users using Basic, but one corner case scenario comes when clients are using certificates to authenticate. In this case, look for the “Client app” value "Exchange ActiveSync" underneath “Legacy Authentication Clients”. As mentioned here, you can use the Azure AD sign-in logs to find users/clients who are still using Basic authentication with the "Client app" filter. Major mobile phone vendors and app developers now include OAuth support in their native email clients. Let’s start with EAS, which was widely used with Basic authentication in the past. Recently, I have heard of two different types of questions related to implementation of OAuth – questions related to Exchange ActiveSync (EAS) use and POP/IMAP OAuth configuration.įinding Basic auth ActiveSync usage in sign-in logs Seeing that we are past mid-August, you should have ample motivation to plan for the elimination of Basic authentication. Microsoft is going to disable Basic authentication for most Exchange Online protocols starting October 1, 2022.
We are getting close to the end of a more than three-year long journey.
Hopefully, you have read some of our announcements around disabling Basic authentication in Exchange Online.
0 kommentar(er)
