Objective

Update the authentication type for your Microsoft Exchange® Server from Basic/NTML authentication (Basic Auth) to OAuth authentication (OAuth) to remain up-to-date with Microsoft support timelines.

Steps

Before you begin

Before connecting a new service account that uses OAuth authentication:

1. Contact Coconut Support to have a second Service Account Credentials section added to the Configuration tab in your Microsoft Exchange settings in Coconut

2. Using incognito mode, login to Coconut using an account with an Admin role

   • NOTE: If you need to access Coconut using SSO, create an Admin user in Coconut for the Service Account and login & complete these changes using that user instead

3. Open another tab in your browser, navigate to Microsoft Outlook®, and sign out

4. Complete the following steps while signed out of Microsoft

Hot Tip!

Once you have completed the connection steps and clicked Authorize, you will be redirected to Microsoft, where you will need to sign back in using your service account credentials. If you are not redirected, this indicates that you may not have been signed out of Microsoft when completing the authentication setup process.

Connect a new Service Account using OAuth authentication

1. From the navigation menu, click Settings>Microsoft Exchange>Configuration

2. Navigate to the additional blank Service Account Credentials form now available from the Configuration tab

    

   
   •  

     • An additional blank Service Account Credentials form is now available and accessed from Settings>Microsoft Exchange>Configuration

3. Link the existing service account using OAuth by completing the form fields and clicking Authorize

    

   • NOTE: Details on completing this step are available in the Setting up Microsoft Exchange Integration OAuth section of Connect Microsoft Exchange® to Coconut Calendar Using OAuth (Microsoft Exchange Integration)

Update users to sync using OAuth authentication

Next, update all users to sync using OAuth; to do this:

1. Within Settings>Microsoft Exchange, click User Accounts

2. Both Basic Auth and OAuth columns display for each user

   • NOTE: The column heading titles correspond to the Display Name given to each configuration

3. Check the OAuth option for each user you want to migrate to OAuth

   • Alternatively, from the table header row, check the heading for the OAuth Authentication Type to select all users

4. De-select the Basic Auth option for each user you migrate to OAuth

   • Alternatively, from the table header row, de-select the heading for the Basic Auth Authentication Type to de-select all users

Hot Tip!

Update one or a small group of users to the new OAuth configuration using the update steps above as a test run.

Once the single user or small group of users is updated:

1. Click Users

2. Click the Filter list icon

3. Enter the name of the user or one of the users that are part of the test run group

4. Select the user

5. From the Users table, under Permissions, click Details

6. Confirm there are no sync errors displaying for OAuth for that user

Disconnect Basic Auth service account

Disconnect the Basic Auth service account once all users are synced to the OAuth account; to do this:

1. Within Settings>Microsoft Exchange, click Configuration

2. Navigate to the Service Account Credentials form for the Basic/NTML Authentication Type

3. Click Disconnect