Microsoft announced on 20 September 2019 that it plans to stop support for Basic Authentication (that is, transmission of the username and password combination) on all Microsoft APIs, in order to improve security across their product APIs.
Microsoft is enabling OAuth 2.0 (the industry-standard protocol for authorization) on all of their APIs and that change is already in place.
Microsoft is not saying that it will disable older APIs, for example, IMAP.
When will Microsoft stop support for Basic Authentication?
Basic Authentication on all Microsoft APIs will be disabled on October 13, 2020.
How is Zendesk Sell affected?
There are three experiences in Sell that currently use Basic Authentication and will be impacted by this change. These are the following integrations:
- Office 365 Email integration
- Office 365 Calendar integration
- Office 365 Contacts integration
Zendesk Sell will support OAuth authorization for all three integrations by 31 August 2020. This timeline provides customers with six weeks before the end of Basic Authentication support to authorize using OAuth 2.0.
What do Zendesk Sell customers need to do?
If you have a Zendesk Sell account with any of the Office 365 integrations enabled, each account user will need to reauthorize using their own Microsoft account.
From 1 September 2020, Zendesk will send an email with instructions and 1-step link to each affected user so that they can reauthorize their account. The process is similar to authorizing a Microsoft account in other services.
See the following links for more information about the Microsoft announcement and other related resources.