To construct the consent URL, take the following URL: The easiest way to add Thunderbird to the allowed applications and grant consent to the organization, is by constructing an admin consent URL. So, how to go ahead if your organization restricts access to third party applications, and they only want to allow specific applications, which is of course good practice. This process has been blogged about for common popular applications, such as the native iOS Mail app or the Gmail app on Android. The procedures below have been run against Thunderbird 78.0b4 on Windows as well as Ubuntu.īefore we move on to Thunderbird, we first make sure the organization settings allow for third party applications to access your mailbox Exchange Online. That said, in this article I will show you how to approve usage of a popular 3 rd party e-mail application Thunderbird, using IMAP protocol in conjunction with the Modern Authentication scheme. resistant to password spray attacks), as well that it can leverage Microsoft 365 functionality like Conditional Access to limit protocols to certain locations. The benefits of Modern Authentication are of course that it is a more secure model (e.g. That does not mean however developers and organizations can sit back and relax: Act sooner rather than later, the end of Basic Authentication is nigh. With Modern Authentication available, vendors, developers as well as organizations running custom scripts are given time to adopt Modern Authentication where applicable.īy delaying the original end date of Basic Authentication from Octoto Q3’ish 2021 due to the Corona situation, the adoption period is increased significantly. This support was much needed with the imminent deactivation of Basic Authentication. Not too long ago, the Exchange product group enabled Modern Authentication (or OAuth2) support for IMAP and SMTP in Exchange Online, and shortly after for POP3 as well. Update 22feb2021: Added note about enabling SMTP Authentication.

Exchange modern authentication