Microsoft announced on 20 September 2019 that it plans to stop support for Basic Authentication (that is, transmission of the username and password combination) on all Microsoft APIs, in order to improve security across their product APIs.
Microsoft is enabling OAuth 2.0 (the industry-standard protocol for authorization) on all of their APIs and that change is already in place.
Microsoft is not saying that it will disable older APIs, for example, IMAP.
When will Microsoft stop support for Basic Authentication?
The initial announcement said that Basic Authentication on all Microsoft APIs will be disabled on October 13, 2020. However, since then Microsoft has changed the date to the second half of the 2021, due to the COVID-19 crisis.
How is Zendesk Sell affected?
There are three experiences in Sell that currently use Basic Authentication and will be impacted by this change. These are the following integrations:
- Office 365 Email integration
- Office 365 Calendar integration
- Office 365 Contacts integration
Zendesk Sell will support OAuth authorization for all three integrations by the original date, 13 Oct 2020.
What do Zendesk Sell customers need to do?
If you have a Zendesk Sell account with any of the Office 365 integrations enabled, each account user will need to reauthorize using their own Microsoft account.
From the beginning of October 2020, Zendesk will send an email with instructions and 1-step link to each affected user so that they can reauthorize their account. The process is similar to authorizing a Microsoft account in other services.
See the following links for more information about the Microsoft announcement and other related resources.