Cloud Extender integration of IBM Security MaaS360 with Watson with Modern Authentication (OAuth2.0) for Office 365 Email Notification module

View Only

Cloud Extender integration of IBM Security MaaS360 with Watson with Modern Authentication (OAuth2.0) for Office 365 Email Notification module

By Rekha Puthusseri Veetal posted Mon February 14, 2022 07:33 AM

Like

Microsoft plans to end support for Basic authentication to Exchange online in near future. Users are now encouraged to use Modern authentication.

What is Modern Authentication & how different is it from Basic Authentication?

The term “Modern Authentication” in Office365 is a combination of authentication and authorization methods, providing ways to increase the organization's security. It uses OAuth 2.0 token-based authentication provided by an identity provider (Microsoft) unlike password-based Basic Authentication, making it more secure.

What’s new?

MaaS360 Cloud Extender now supports Modern authentication (OAuth2.0) for Office 365 Email Notification module along with Basic authentication.

If you have a Cloud Extender with an Email Notification module already configured for Basic Authentication, it takes less than a few mins to set up Modern authentication. Isn’t it that simple?

Setting it up

Permissions required on Exchange Admin:

Impersonation

For Office 365, you must assign application impersonation rights to the listener accounts. To set these permissions, follow these steps on the Office 365 Exchange admin center:

Permissions > Admin roles > Discovery Management

1. From the Roles section, edit the group, and then click the plus sign (+) and choose Application Impersonation.
2. Add every listener account that is used by the Cloud Extender under this role group.

A Global Administrator account with access to Azure Active directory.
Modern Authentication setting enabled on Microsoft Office 365.
Administrator consent for Registered application.

Registering an application On the Azure AD admin portal

Redirect URI for registering an application: urn:ietf:wg:oauth:2.0:oob

Granting permission for registered application

Select the app that you registered on the Azure portal & grant API permissions. Update the Authentication for registered application to “Public Client’.

Email Notification configuration on MaaS360 portal

Enable the Email notification module from the MaaS360 portal.

From Setup > Services, expand and then select the message icon next to the Secure Mail section to enable email notifications for iOS devices in the MaaS360 portal.