Each login request to an application or website, even when using secure methods such as HTTPS, puts the enterprise at risk by transmitting the username and password, potentially leaking user credentials. On the technical front, there are several reasons why basic authentication is not a safe enough authentication method. Why basic authentication falls short in security Microsoft said it will permanently disable basic authentication for these protocols in the first week of January 2023. 1, Microsoft announced it will let customers re-enable basic authentication for selected protocols one time after the Oct. 1, which makes it imperative for enterprises that rely on the platform to prepare for this Microsoft modern authentication deadline. Basic authentication support in Office 365 ends on Oct. Microsoft recognized the high risk associated with basic authentication and has pushed for a shift to the more secure modern authentication. As more organizations use online services, this legacy authentication approach is not secure enough. None currently, if one should become available this will be updated to reflect that state.Companies that use Active Directory for identity management have relied on a basic authentication to give users access to workstations, network resources and other services within the environment. It seems that the ProPlus accounts might still permit this after the set date, however it seems clear that improving security is the goal of this forced change, and perhaps it would benefit Jira to follow suit. Without this feature, regular office 365 accounts won't permit applications like Jira to connect to them. Implement some other method of allowing Jira to authenticate to an office 365 mailbox, such as OAuth2. More details about the upcoming changes to Microsoft's products can be found in Suggested Solution As of today, basic auth (username and password) via IMAP/POP is the only way to make Jira able to use an Office 365 mailbox for receiving email. Office 365 is planning to discontinue support for basic auth on services like POP and IMAP on October 13, 2020.

The rollout should take a day or two to propagate to all tenants.

We would like to announce the rollout of the Microsoft OAuth for Incoming Emails’ on Jira Software Cloud.

Modern auth office 365