Search Google Appliance

Information Technology

Microsoft 365 Email & Gmail Security Updates: Modern Authentication Migration

Microsoft is phasing out Basic Authentication because it does not support two-step login, which is the best practice for information security. Enabling two-step login technology on Office 365 applications furthers UMass Amherst IT's effort to increase information security, strengthen campus infrastructure, and protect personal and university data against cybersecurity threats.

Starting Wednesday, January 12, 2022, faculty, staff, and students can access their university email only via applications that support modern authentication. Most members of the campus community will not notice any impact related to these changes. In some cases, this might mean that you will need to install a later version of Mail or Outlook on a mobile device. Some users will need to delete and re-add email/account profiles. See below for specific details.

 


 

Impacted Users

  • iOS users/iPad users with iOS10 or older
  • Outlook 2013, 2010, 2008, or 2007 on Windows and Mac and Mail on Mac
  • Android Mail users
  • Thunderbird, Eudora, Pine
  • Other legacy email software

 


 

Next Steps - What You May Need to Do

Outlook on the Web

Sign into outlook.office.com with your NetID and password for secure access to your email in a web browser.

 

Install Outlook App

For the best security and easiest setup, install the latest version of Outlook included in Office 365.

Depending on which version of Outlook you are currently using, you may need to upgrade. 

 

Outlook Mobile Apps

The Outlook mobile apps for iOS and Android are fully compatible with Microsoft's secure login requirement. If you are using Outlook on a mobile device, no action is needed.

 

Mac Mail & Calendar 

  • Mac OS 10.14 (Mojave) and newer: The Mail and Calendar apps that come with Mac OS 10.14 (Mojave) and Mac OS 10.15 (Catalina) will continue to work. Depending on how you originally set up your Mac, you may need to delete and re-add your email/calendar account profile to avoid a service interruption. 
  • Mac OS 10.13 and older: The built-in Mail and Calendar apps that came with Mac OS 10.13 or older will not work. To continue using those apps, you will need to upgrade your Mac OS, or you can switch to using Outlook for Mac or Outlook on the Web.  
     

iPhone/iPad Mail & Calendar Mobile Apps

  • iOS/iPadOS 11 or newer: The Mail and Calendar apps that come with iOS 11 or newer will continue to work; however, you may need to delete and re-add your email/calendar account to avoid a service interruption.
  • iOS/iPadOS 10 and older: The built-in Mail and Calendar apps for iOS 10 and older will not work. We recommend upgrading your device to the latest version of iOS or switching to Outlook for iOS.
     

Android Mail & Calendar Mobile Apps

Android does not support Microsoft's new method of logging in. To avoid a service interruption, you will need to install Outlook for Android.

 


 

MailAuth Retirement

Members of the UMass community using mail auth for Outgoing mail server (SMTP) in the configuration of their email accounts should use Google and Exchange for authenticated SMTP. 

Where possible, please use email clients that support Modern Authentication (such as Outlook or Apple Mail), because Basic Authentication for both Google and Exchange will no longer be supported. These changes are necessary to ensure the safety of your information and university data. Impacted services include legacy mail clients such as Thunderbird, OWL, and other services.

What You Need to Do

  • If you are using your university account in an email client which requires manual SMTP configuration, you will need to update your settings to use either Google or Microsoft’s SMTP servers (depending upon which email system you use).  
  • You can also access your email online at mail.google.com for Google Mail or outlook.office.com for Office 365 email. 
  • Members of the campus community who configured their university email account in an email client using the IMAP/POP protocol where the SMTP or sending server was specified as mail-auth.oit.umass.edu will need to remove and re-add the account.