Registering and Configuring Automate and Automate Desktop for Microsoft Office 365 Modern Authentication

 

Overview 

In Automate and Automate Desktop 11.5.0, the Email and Exchange actions were updated to support Modern Authentication (OAuth 2.0 token-based authorization) with Exchange Online. Microsoft will disable Basic Authentication for all Exchange Online users starting on October 1, 2022. For more information, see the Deprecation of Basic authentication in Exchange Online article from Microsoft.

Impact 

Many Automate customers use the Email and Exchange actions to send messages with Exchange Online by way of the Exchange Web Services (EWS) protocol. If you are currently using Basic Authentication with this protocol, you will be impacted by this change. 

Severity

Fortra considers this issue to be critical. 

Action

Microsoft recommends using newer, more secure protocols such as Modern Authentication to authenticate with Exchange Online. We recommend customers currently using Basic Authentication with the Email and Exchange actions to complete the steps listed in the Registering and Configuring Automate Desktop or Automate/Plus as an Application in Azure Active Directory (AD) and Configuring Email and Exchange Actions for Modern Authentication sections below to avoid any disruptions.

While Fortra recommends accessing applications securely, Microsoft is allowing organizations to submit a request to re-enable or opt out of this proactive protection. These requests need to be submitted to Microsoft by October 1, 2022. You may choose to use this option until your tasks and workflows have been updated to use Modern Authentication. For more information to re-enable or opt out of this change, see the Basic authentication Deprecation in Exchange Online – September 2022 Update article from Microsoft. Please reach out to Fortra Support or your Fortra Account Representative for more information.

Registering and Configuring Automate or Automate Desktop as an Application in Azure Active Directory (AD) 

To use Modern Authentication with the Email and Exchange actions in Automate or Automate Desktop, you need to create an Application (client) ID, Directory (tenant) ID, and client secret Value in Azure AD. 

To register and configure Automate or Automate Desktop as an application in Azure AD, do the following: 

1. Complete the steps in Register your application to create the Application (client) ID and Directory (tenant) ID.
2. Complete the steps in Configure for app-only authentication to create the client secret Value.

Configuring Email and Exchange Actions for Modern Authorization 

Automate Desktop

To configure the Email and Exchange actions in Automate Desktop, you need the Application (client) ID, Directory (tenant) ID, and client secret Value. 

Updating connections within a task 

1. Open Automate Desktop 2023 Task Builder.
2. On the Actions pane, double-click the Email or Exchange action.
3. In the Protocol list, select EWS Online.
4. In the Client ID box, enter the Application (client) ID.
5. In the Tenant ID box, enter the Directory (tenant) ID.
6. In the Client Secret box, enter the client secret Value.
7. Complete all other required parameters.

Updating the mail server for the Default Properties system connection:

1. Open Automate Desktop 2023 Task Administrator.
2. From the bottom navigation bar, select Options.
3. From the left navigation pane, select Default Properties.
4. Double-click Email.
5. Select Microsoft Exchange.
6. In the Protocol list, select EWS Online.
7. In the Email address box, enter the email address to use to authenticate with Exchange.
8. In the Client ID box, enter the Application (client) ID.
9. In the Tenant ID box, enter the Directory (tenant) ID.
10. In the Client Secret box, enter the client secret Value.
11. Select Apply.

Updating Email Triggers 

1. Open Automate Desktop 2023 Task Administrator.
2. Right-click on an existing task, and then select Edit Triggers.
3. Select Add.
4. Double-click Email.
5. In the Protocol list, select EWS Online.
6. In the Client ID box, enter the Application (client) ID.
7. In the Tenant ID box, enter the Directory (tenant) ID.
8. In the Client Secret box, enter the client secret Value.
9. Complete all other required parameters. 

Automate 

To configure the Email and Exchange actions in Automate, you need the Application (client) ID, Directory (tenant) ID, and client secret Value. 

Updating connections within a task 

1. Open Automate 2023 Management Console.
2. From the bottom navigation bar, select Repository.
3. Double-click on a task.
4. Double-click on Edit <task name>.
5. On the Actions pane in the Task Builder, double-click the Email or Exchange action.
6. In the Protocol list, select EWS Online.
7. In the Client ID box, enter the Application (client) ID.
8. In the Tenant ID box, enter the Directory (tenant) ID.
9. In the Client Secret box, enter the client secret Value.
10. Complete all other required parameters. 

Updating the mail server for the Server Settings system connection:

1. Open Automate 2023 Management Console.
2. From the bottom navigation bar, select Options.
3. From the left navigation pane, select Server Settings.
4. Double-click Email.
5. Select Microsoft Exchange.
6. In the Protocol list, select EWS Online.
7. In the Email address box, enter the email address to use to authenticate with Exchange.
8. In the Client ID box, enter the Application (client) ID.
9. In the Tenant ID box, enter the Directory (tenant) ID.
10. In the Client Secret box, enter the client secret Value.
11. Select Apply.

Updating the mail server for the Default Task Agent Properties system connection:

1. Open Automate 2023 Management Console.
2. From the bottom navigation bar, select Options.
3. From the left navigation pane, select Default Properties.
4. For Default Task Agent Properties, double-click Email.
5. Select Microsoft Exchange.
6. In the Protocol list, select EWS Online.
7. In the Email address box, enter the email address to use to authenticate with Exchange.
8. In the Client ID box, enter the Application (client) ID.
9. In the Tenant ID box, enter the Directory (tenant) ID.
10. In the Client Secret box, enter the client secret Value.
11. Select Apply.

Updating Email Conditions 

1. Open Automate 2023 Management Console.
2. From the bottom navigation bar, select Repository.
3. From the left side pane, select Conditions.
4. From the top pane, select New.
5. Double-click Email.
6. Right-click on New Condition, and then select Edit.
7. Select Set Properties.
8. In the Protocol list, select EWS Online.
9. In the Client ID box, enter the Application (client) ID.
10. In the Tenant ID box, enter the Directory (tenant) ID.
11. In the Client Secret box, enter the client secret Value.
12. Complete all other required parameters.