Latest issue regarding Microsoft Authentication Standards

AaronA

Earlier this week, SiteLink web edition stopped working with Microsoft O365 due to the deprecation of basic authentication methods.

After reaching out to the support team we were told that migration to another email service is the solution and to call Microsoft support and ask them to change it. 

I can tell you with 100% certainty it is almost impossible to get a real agent on the phone, much less tell them they need to change their security standards for a small 3rd party software company. However, I did call both GoDaddy and Microsoft to discuss. They both said the same thing to me (of course), that the software company will need to fix it on their end. So here we are, pointing fingers at each other. 

We operate a professional staffed, 24/7 surveilled storage company with 6 facilities across the country.  We have a large client list that relies on email communications for new lease agreements and payment receipts. If communications from our business come from a non-branded generic domain, it would appear to the receiver as spammy. We will not put our brand in jeopardy nor the trust our clients have for the company. 

If you have been affected in the same way, we would like to have a conversation on how your company has mitigated the issue without having to migrate to another email service. 

MamaDuke7

Ours actually stopped working with Outlook 2 or 3 years ago and we had to migrate to Gmail at that time.  It's incredibly frustrating that Storable changes all the things we don't want changed, but won't bother with proper updates like this or chip readers for cards, etc.

AaronA

@MamaDuke7
How large is your organization? Mail migrations are not a small task, unless it was 1 email address. 

jimbo1956

We finally gave up also and now use a gmail address for outbound out of sitelink. We still maintain our microsoft account as well and use it for outbound non system mail. Very frustrating but I spent a year yakking at Microsoft, Godaddy and Sitelink. 

AaronA

@jimbo1956
That's unsettling. I find it strange that we made it this far considering we knew this was coming down the pipeline for more than 3 years. So how would you say the new workflow has impacted your business, if at all, and how much additional time does this require out of your workflow? 

MamaDuke7

AaronA said:

@MamaDuke7
How large is your organization? Mail migrations are not a small task, unless it was 1 email address. 

There was no mail migration.  I have over 1000 tenants, but all I did was change MY email to Gmail and update the settings in Sitelink.  Then the emails went to tenants from the new email.  Tenants adjusted to the new email they received.  It wasn't a huge deal.

Climateguard

We had to switch over to a gmail account also. Some of our commercial customers whose companies use their own domain servers still cant receive our invoices. Also, I too used to work in IT and internet tech support and can honestly say the latest update to Sitelink "hiding the password field before login"......I mean, really guys? What the actual (insert your own word here) is this suppose to accomplish?

AaronA

Thank you all for the input. I was able to work with GoDaddy today on this. They worked with Microsoft recently and developed a "Security Setting" that can be turned off. Effectively disabling MFA as a required method of authentication. This allows the option to enable on a per user basis. I don't agree with it fully but it still offers better security protocols on a granular level.

See attached instructions if your domain and email is hosted with GoDaddy. It will fix the authentication issue in SiteLink as we wait for the Dev team to publish updates to allow new security standards.