

To check the current authentication setting at the tenant level, run the following command: Get-TransportConfig | Select SmtpClientAuthenticationDisabled Then, you can either wait for the token to be refreshed after it expires, or run the following command to force it to refresh immediately: Set-User -Identity -STSRefreshTokensValidFrom $(::UtcNow)Įnable Basic authentication for the SMTP protocolīasic authentication for the SMTP protocol can be enabled and disabled at the tenant level or at the mailbox level. To re-enable Basic authentication for these protocols, run the following PowerShell command: Set-AuthenticationPolicy -Identity -AllowBasicAuthPop -AllowBasicAuthImap If you previously disabled Basic authentication for POP or IMAP by using an Exchange Online authentication policy, you can change the policy to allow these protocols. Enable Basic authentication for POP and IMAP protocols

To do this, disable Azure Active Directory security defaults if they are enabled. If you're using POP/IMAP and SMTP for an Exchange Online account in Outlook, you must enable Basic authentication for these protocols. This is because Outlook supports Modern authentication for only Exchange,, and Gmail at this time. If you have disabled Basic authentication, and you are trying to configure an Outlook profile by using POP and SMTP or IMAP and SMTP, you will notice that Outlook neither connects nor authenticates. Also, tenants are encouraged to disable Basic authentication, and move to a Modern authentication tenant for modern clients. Microsoft recently announced the Exchange Online capability to use OAuth authentication for POP and IMAP and SMTP protocols.
