Re: [Evolution] EWS support for Office365 Azure MFA?

[PJ Waskiewicz <pjwaskiewicz gmail com>]

On Mon, Dec 5, 2016 at 1:40 PM, Patrick O'Callaghan <poc usb ve> wrote:
> On Mon, 2016-12-05 at 13:24 -0700, PJ Waskiewicz wrote:
> > Hi folks,
> >
> > My employer is going to be turning on MFA for Office365 in the next
> > few months.  We have a relatively large Linux developer base, with
> > varying use cases for email.  Many of us use evolution with EWS
> > currently, and this will no longer work once MFA is enabled.
> >
> > Are there plans to build in MFA support for evolution-ews?  I've
> > looked around various forums, and have found nothing.  If it's
> > something not in current plans, how does one go about requesting the
> > feature to be looked at?
>
> You might want to explain what MFA is. I for one have no idea.

Hi Patrick,

Sorry about that.  MFA = Multi-factor authentication.  You would
provide your username and password like normal through EWS, but there
would be a second password you'd provide that would come from another
application, such as Google Authenticator, or MobilePass, or Duo, etc.
This can be an application running on your phone to generate the code,
you can have it send push requests to your phone, or the password can
come from an old-school token ID generator (like the old RSA tokens
used for VPNs, etc.).

Office365 has support to extend EWS to include MFA as part of the
login credentials.  Here's a link I found on the server side to
configure it for a user, to help better illustrate what this is:
https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-8f0454b2-f51a-4d9c-bcde-2c48e41621c6

Basically I'm looking for any help if this extra authentication is
being considered for evolution-ews, or if it can be considered if it
currently isn't.

Any other questions, please let me know!

Cheers,
-PJ