#2058 IMAP/SMTP Oauth

[Giorgio Maggiolo]

Greetings,

we are a bunch of happy users of iTOP, but we are facing a problem: from October 2022, Microsoft is going to disable IMAP Auth, allowing only IMAP OAuth2 to be used to connect to a mailbox(1); actually is the same for SMTP either, but there are some ways to avoid that problem.
Is there any plan to implent OAuth in the near future?

BR,

Giorgio

(1) https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-september-2021-update/ba-p/2772210

[Stephen Abello]

Hello everyone,
We're excited to share that you can now test out our new OAuth email authentication mechanism!

It requires:

• iTop 2.7 using the following branch: feature/OAuthMail
• Both mail to ticket modules combodo-email-synchro and itop-standard-email-synchro
• And our latest OAuth module for IMAP/POP: combodo-oauth-email-synchro

It supports SMTP, IMAP and POP3 with Azure and Google providers.

To get started, go to your Configuration menu > OAuth 2.0 item and you'll be prompted with our wizard to help set up outgoing or incoming emails.
Outgoing mails are still configurations parameters (mind to include classic parameters such as email_transport_smtp.host or email_transport_smtp.host).
A new MailInbox object is used for incoming emails., you can still give parameters to imap_options module parameter such as ssl or novalidate-cert

If you have any problems, we won't be able to assist you like we do on regular versions as it's still in development and we'll focus on merging it to iTop 3 branches (also I'll be on vacation for quite a while 😁).
However you can get more debug log using the following configuration parameter in your iTop which should help you figure out what's wrong:

'log_level_min' => [
'OAuth' => LogAPI::LEVEL_DEBUG
],

Thanks for your patience!

Stephen

[Giorgio Maggiolo]

Hello Stephan,
thanks a lot! We'll wait for the implementation on 3.0.1 :)
Have a nice vacation ;)

Giorgio

[Giorgio Maggiolo]

Hi Stephen,
hope the vacation was well :D
So, any news about compability for version 3.0.0?
BR,
Giorgio

[Stephen Abello]

Hi Giorgio,

Everything was great! I only came back a couple of days ago 😁

I checked with the team that worked on OAuth while I was away, some technical choices needed some rework but we're getting close to a final version on our 2.7.7 branch (release should happen later this month) and we'll merge it on our 3.0.2 branch (release is anticipated by the end of the summer) when everything will be validated, this is obviously not an official announcement!

Regards
Stephen

[Darkk69]

Hello,

Looks like Microsoft today shut off the basic auth which broke the e-mail side of iTop. After googling around I've manage to get that feature restored. I guess Microsoft is turning this off on select tenants for 24-48 hours and turn it back on. And we're so lucky to be picked today!

I wasn't fully aware Microsoft is doing this till this morning. Currently I am running iTop 2.5 (I know it's old) and got 3.1 running as a test. I guess I'll go ahead and upgrade 2.5 to 2.7 to get this fixed while I work on 3.1.

Fun stuffs!

[Benjamin DALSASS]

Fix iTop 2.7.7 will be delivered next week

[Giorgio Maggiolo]

Hello Benjamin, but the fix will also be available for version 3.0.0?

[Pierre Goiffon]

Hello,
Yes, the new module will be included in 3.0.2 as well (should be available by september)