Modern Authentication

Overview

This page contains information on what errors may come up when setting up your email with Modern Authentication (Modern Auth), and what steps are needed to resolve them.

Information

Microsoft will soon phase out Basic Authentication and replacing it with Modern Authentication. This is due to Modern Authentication's ability to support multi-factor authentication (such as Duo), which is better for information security. When this change goes into effect, any email application that uses Basic Authentication may not work properly. 

In many cases, simply removing the account from the application and re-adding the account using the standard Sign In method will resolve any issues being experienced when Modern Authentication is first turned on for an account. Please note that this can take a significant amount of time, depending on the size of your account and your other connected applications (Contacts, Calendar, etc). Consider trying this while connected to a wired or wireless network (instead of a cellular network) to increase speeds and avoid hitting data limitations. 

Additionally, accessing email through a web client will continue to work, even if an application is having issues. 

Below are listed all known errors and important information when attempting to set up UO email with Modern Authentication in the following programs:

If the error you are encountering is not listed, please create a ticket on our Email and Calendar Help page for assistance.

Webmail

Webmail does not support Modern Auth. For security reasons, it is advised to migrate to UOmail if you are still accessing your email through Webmail. For instructions on how to migrate to UOmail, see Moving from Webmail to UOmail: Opting in.

Gmail

If you have previously configured your Gmail account to receive your UO email, and/or send as your UO email (send on behalf), please be aware that this will no longer be an option when Modern Authentication in enabled on your account. Once your account has modern authentication enabled, you can no longer pull your UO email into Gmail and/or reply from Gmail on behalf of your UO account. 

If you have the Gmail application on your Android phone, you can still use this option as it supports modern authentication. Please follow our article Setting Up Email: Android Mail Application for instructions on how to set up your email. 

We recommend using Outlook online to check your email or consider configuring a supported email client

Please Note: This does not affect standard email forwarding to Gmail.

Android Mail

The native Android mail application does not officially support Modern Authentication if your email account was set up manually. A manual setup will prompt the following automatic email:

Subject: Your email access has been blocked.

You are receiving this message because your IT department has blocked your email access. This could be due to temporary conditions, like your network location. Contact your IT department with any questions or concerns about this mail.

Removing and re-adding the account using the standard Sign In method will resolve this error. Please note that this can take a significant amount of time, depending on the size of your account and your other connected applications (Contacts, Calendar, etc). Consider trying this while connected to a wired or wireless network (instead of a cellular network) to increase speeds and avoid hitting data limitations. 

Mac Mail

UO email accounts set up in Mac Mail prior to the Modern Auth update will continue to work provided the device is running macOS 10.14 or newer. If issues are encountered, it is advised to first re-setup the account in Mac Mail

Some users on macOS 10.14 have experienced issues logging back into Mac Mail after Modern Auth is applied to their accounts. Specifically, after successfully responding to the Duo prompt, the pop-up window will remain blank except for a spinning icon and never finish adding the account to the application. This issue has been resolved by having users connect to the UO VPN when initially setting up their account with Mac Mail. After logging in successfully once while connected to the VPN, any removing or re-adding of the account again to Mac Mail should not need the VPN. 

Window showing spinning circle on Mac Mail account set-up page.

If other issues are encountered, it is still advised to first re-setup the account in Mac Mail, then try the following solutions:

iOS Mail

Similar to Mac Mail, UO email accounts set up in iOS Mail application prior to the Modern Auth update will continue to work provided the device is running iOS 11 or newer

Some users may receive an automated email that says:

Subject: Your email access has been blocked.

You are receiving this message because your IT department has blocked your email access. This could be due to temporary conditions, like your network location. Contact your IT department with any questions or concerns about this mail.

Additionally, this message may appear in your Calendar app:

Calendar Invitation

Your response to the invitation cannot be sent.  [OK]

Removing and re-adding the account using the standard Sign In method will resolve this error. Please note that this can take a significant amount of time, depending on the size of your account and your other connected applications (Contacts, Calendar, etc). Consider trying this while connected to a wired or wireless network (instead of a cellular network) to increase speeds and avoid hitting data limitations. 

If other issues are encountered, it is still advised to first re-setup the account in iOS Mail, then try the following solutions:

Thunderbird

Users who prefer to use Thunderbird may see a pop-up window with an error that says:

Window Header: Login to account "[Name of Account]" failed.

Login to server outlook.office365.com with username [Duck ID]@uoregon.edu failed.

To fix this, users will need to change their Authentication Method. This can be done without removing and re-adding the account by doing the following:

  • Navigate to Account Settings
  • Select Server Settings from the menu on the left.
  • Under Security Settings in the Server Settings area, change the Authentication Method to OAuth2 from the drop-down options.

Details

Article ID: 130054
Created
Thu 3/11/21 12:02 PM
Modified
Wed 5/11/22 5:15 PM

Related Articles (7)

Step-by-step instructions for setting up your email in Android Mail on your mobile device of cell phone.
Step-by-step instructions for setting up your email in iOS Mail for iPhone & other Apple mobile devices.
Step-by-step instructions for setting up your email in the macOS Mail application.
Step-by-step instructions for setting up your email in Outlook 365 for Mac.
Step-by-step instructions for setting up your email in Outlook for iOS.
Step-by-step instructions for setting up your email in Thunderbird.
This page describes the features of the UO Microsoft Exchange service including a service description, how to obtain the service and how to get support.