{"id":30690,"date":"2023-07-16T00:01:10","date_gmt":"2023-07-15T22:01:10","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=30690"},"modified":"2023-07-15T18:20:50","modified_gmt":"2023-07-15T16:20:50","slug":"exchange-online-client-credential-flow-for-smtp-auth-available-july-2023","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2023\/07\/16\/exchange-online-client-credential-flow-for-smtp-auth-available-july-2023\/","title":{"rendered":"Exchange Online: Client Credential Flow for SMTP AUTH available (July 2023)"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline; border-width: 0px;\" title=\"Exchange Logo\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2022\/06\/Exchange.jpg\" alt=\"Exchange Logo\" align=\"left\" border=\"0\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/?p=283817\" target=\"_blank\" rel=\"noopener\">German<\/a>]Quick addendum from this week: Microsoft's Exchange team has already announced the availability of Client Credential Flow (CCF) for SMTP AUTH in Exchange Online on July 10, 2023. Client Credential Flow (CCF) for SMTP AUTH enables applications to use modern authentication to deliver authenticated email to Exchange Online without requiring an interactive login. Using OAuth reduces the risk of credentials being compromised during authentication.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg08.met.vgwort.de\/na\/88ab3e496b234c78a37e30325edaa130\" alt=\"\" width=\"1\" height=\"1\" \/>The following tweet from the Exchange team at Microsoft points out this issue, which is described in the Techcommunity post <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/announcing-client-credential-flow-for-smtp-auth-in-exchange\/ba-p\/3869966\" target=\"_blank\" rel=\"noopener\">Announcing Client Credential Flow for SMTP AUTH in Exchange Online<\/a>.<\/p>\n<p><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/announcing-client-credential-flow-for-smtp-auth-in-exchange\/ba-p\/3869966\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2023\/07\/k0fDr5L.png\" \/><\/a><\/p>\n<h2>What is Client Credentials Flow?<\/h2>\n<p><a href=\"https:\/\/auth0.com\/docs\/get-started\/authentication-and-authorization-flow\/client-credentials-flow\" target=\"_blank\" rel=\"noopener\">Client Credentials Flow<\/a> (defined in <a href=\"https:\/\/tools.ietf.org\/html\/rfc6749#section-4.4\" target=\"_blank\" rel=\"noopener\">OAuth 2.0 RFC 6749, section 4.4<\/a>) allows an application to exchanges its credentials, such as client ID and client secret, for an access token. Microsoft described this in March 2023 for Azure in <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/develop\/v2-oauth2-client-creds-grant-flow\" target=\"_blank\" rel=\"noopener\">this support post<\/a>. Microsoft says:<\/p>\n<blockquote><p>Client Credential Flow (CCF) for SMTP AUTH enables applications to use modern authentication to deliver authenticated email to Exchange Online without requiring interactive sign-on. Using OAuth reduces the risk of credentials being compromised during authentication.<\/p><\/blockquote>\n<h2>How can it be used?<\/h2>\n<p>CCF for SMTP AUTH is now available in all Microsoft environments, the Teccommunity post says. Administrators can use the steps under Authenticating an IMAP, POP or SMTP Connection with OAuth for SMTP. The following steps are required to use it:<\/p>\n<ul>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/legacy-protocols\/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth#register-your-application\" target=\"_blank\" rel=\"noopener noreferrer\">Register your application<\/a> with Azure AD<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/legacy-protocols\/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth#get-an-access-token\" target=\"_blank\" rel=\"noopener noreferrer\">Get an access token<\/a> from a token server<\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/exchange\/client-developer\/legacy-protocols\/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth#authenticate-connection-requests\" target=\"_blank\" rel=\"noopener noreferrer\">Authenticate connection requests<\/a>\u00a0using the access token.<\/li>\n<\/ul>\n<p>Details may be read within the linked articles.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Quick addendum from this week: Microsoft's Exchange team has already announced the availability of Client Credential Flow (CCF) for SMTP AUTH in Exchange Online on July 10, 2023. Client Credential Flow (CCF) for SMTP AUTH enables applications to use modern &hellip; <a href=\"https:\/\/borncity.com\/win\/2023\/07\/16\/exchange-online-client-credential-flow-for-smtp-auth-available-july-2023\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,1547],"tags":[2260],"class_list":["post-30690","post","type-post","status-publish","format-standard","hentry","category-security","category-software","tag-exchange-online"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/30690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=30690"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/30690\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=30690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=30690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=30690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}