Find it in the Microsoft Portals

Microsoft Entra -> Identity -> General

What does it do?

This tenant-wide Default Configuration controls whether older SMTP clients using basic authentication can send emails. It applies to mailboxes that do not have a specific setting enabled or disabled for this feature, meaning they will inherit the tenant-wide configuration.

Applies To

Tenant Wide

This Default Configuration applies at the tenant level only.

Recommended Configuration

Disabled

Disabling this to enhance security, ensuring that only modern authentication methods are used across the organization, reducing vulnerabilities associated with legacy protocols.

User Impact

Medium

It will no longer be possible for scanner to use Exchange Online to send emails using SMTP and a third-party service should be used instead.

Additional Information

Additional Default Configurations

• Authenticated SMTP Clients (Legacy Protocol) – Per Mailbox