The modern authentication method eliminates some of the risks associated with the exchange of a username and password every time a user needs to authenticate. Microsoft modern authentication uses the OAuth2 protocol and security tokens that administrators use to approve or revoke access to resources. These and other federation methods support a far more secure alternative to basic authentication that relies on token-based claim for access to internet resources and services. Lastly, basic authentication has also not received significant changes or updates to products that rely on it for authentication, such as the Microsoft identity platform.įor modern authentication, customers have several authentication alternatives that do not rely on the basic exchange of username and password, such as OAuth and SAML. Multifactor authentication (MFA) might be difficult or not possible with basic authentication in place. Each login request to an application or website, even when using secure methods such as HTTPS, puts the enterprise at risk by transmitting the username and password, potentially leaking user credentials. On the technical front, there are several reasons why basic authentication is not a safe enough authentication method.

Why basic authentication falls short in security

Microsoft said it will permanently disable basic authentication for these protocols in the first week of January 2023. 1, Microsoft announced it will let customers re-enable basic authentication for selected protocols one time after the Oct. 1, which makes it imperative for enterprises that rely on the platform to prepare for this Microsoft modern authentication deadline. Basic authentication support in Office 365 ends on Oct.

Microsoft recognized the high risk associated with basic authentication and has pushed for a shift to the more secure modern authentication. As more organizations use online services, this legacy authentication approach is not secure enough. Companies that use Active Directory for identity management have relied on a basic authentication to give users access to workstations, network resources and other services within the environment.

Exchange hybrid modern authentication