Body
Overview
This page contains information on what errors may come up when setting up your email with Modern Authentication (Modern Auth), and what steps are needed to resolve them.
Information
Microsoft will soon phase out Basic Authentication and replacing it with Modern Authentication. This is due to Modern Authentication's ability to support multi-factor authentication (such as Duo), which is better for information security. When this change goes into effect, any email application that uses Basic Authentication may not work properly.
In many cases, simply removing the account from the application and re-adding the account using the standard Sign In method will resolve any issues being experienced when Modern Authentication is first turned on for an account. Please note that this can take a significant amount of time, depending on the size of your account and your other connected applications (Contacts, Calendar, etc). Consider trying this while connected to a wired or wireless network (instead of a cellular network) to increase speeds and avoid hitting data limitations.
Additionally, accessing email through a web client will continue to work, even if an application is having issues.
Below are listed all known errors and important information when attempting to set up UO email with Modern Authentication in the following programs:
If the error you are encountering is not listed, please create a ticket on our Email and Calendar Help page for assistance.
Webmail
Webmail does not support Modern Auth. For security reasons, it is advised to migrate to UOmail if you are still accessing your email through Webmail. For instructions on how to migrate to UOmail, see Moving from Webmail to UOmail: Opting in.
Gmail
If you have previously configured your Gmail account to receive your UO email, and/or send as your UO email (send on behalf), please be aware that this will no longer be an option when Modern Authentication is enabled on your account. Once your account has Modern Authentication enabled, you can no longer pull your UO email into Gmail and/or reply from Gmail on behalf of your UO account.
If you have the Gmail application on your Android phone, you can still use this option as it supports Modern Authentication. Please follow our article Setting Up Email: Android Mail Application for instructions on how to set up your email.
We recommend using Outlook on the web to check your email or consider configuring a supported email client.
Android Mail
The native Android mail application does not officially support Modern Authentication if your email account was set up manually. A manual setup will prompt the following automatic email:
Subject: Your email access has been blocked.
You are receiving this message because your IT department has blocked your email access. This could be due to temporary conditions, like your network location. Contact your IT department with any questions or concerns about this mail.
Removing and re-adding the account using the standard Sign In method will resolve this error. Please note that this can take a significant amount of time, depending on the size of your account and your other connected applications (Contacts, Calendar, etc). Consider trying this while connected to a wired or wireless network (instead of a cellular network) to increase speeds and avoid hitting data limitations.
Mac Mail
UO email accounts set up in Mac Mail prior to the Modern Auth update will continue to work, provided the device is running macOS 10.14 or newer. If issues are encountered, it is advised to first re-setup the account in Mac Mail.
Some users on macOS 10.14 have experienced issues logging back into Mac Mail after Modern Auth is applied to their accounts. Specifically, after successfully responding to the Duo prompt, the pop-up window will remain blank except for a spinning icon and never finish adding the account to the application. This issue has been resolved by having users connect to the UO VPN when initially setting up their account with Mac Mail. After logging in successfully once while connected to the VPN, any removing or re-adding of the account again to Mac Mail should not need the VPN.
![Window showing spinning circle on Mac Mail account set-up page.](https://service.uoregon.edu/TDPortal/Images/Viewer?fileName=4b11157c-a196-4a25-bd22-ca87118b4b76.png)
If other issues are encountered, it is still advised to first re-setup the account in Mac Mail, then try the following solutions:
iOS Mail
Similar to Mac Mail, UO email accounts set up in iOS Mail application prior to the Modern Auth update will continue to work provided the device is running iOS 11 or newer.
Some users may receive an automated email that says:
Subject: Your email access has been blocked.
You are receiving this message because your IT department has blocked your email access. This could be due to temporary conditions, like your network location. Contact your IT department with any questions or concerns about this mail.
Additionally, this message may appear in your Calendar app:
Calendar Invitation
Your response to the invitation cannot be sent. [OK]
Removing and re-adding the account using the standard Sign In method will resolve this error. Please note that this can take a significant amount of time, depending on the size of your account and your other connected applications (Contacts, Calendar, etc). Consider trying this while connected to a wired or wireless network (instead of a cellular network) to increase speeds and avoid hitting data limitations.
If other issues are encountered, it is still advised to first re-setup the account in iOS Mail, then try the following solutions:
Thunderbird
Users who prefer to use Thunderbird may see a pop-up window with an error that says:
Window Header: Login to account "[Name of Account]" failed.
Login to server outlook.office365.com with username [Duck ID]@uoregon.edu failed.
To fix this, users will need to change their Authentication Method. This can be done without removing and re-adding the account by doing the following:
- Navigate to Account Settings.
- Select Server Settings from the menu on the left.
- Navigate to Security Settings.
- Change the Authentication Method to OAuth2 from the drop-down options.