To: ACE-IT, EITU, Info-Tech-L, Mailbox Owners, EASI Site
From: Enterprise Applications & Solutions Integration
Re: Microsoft PowerPoint: Retirement of the Reuse Slides and Editor Pane Feature Starting 2026
Dear colleagues,
As previously communicated on July 8, 2025, Microsoft is retiring Basic authentication for Client Submission using Simple Mail Transfer Protocol Authentication (SMTP AUTH) in Exchange Online starting March 1, 2026. Microsoft will require modern authentication using OAuth. This retirement is part of Microsoft’s security improvements across all Microsoft 365 services.
What is changing
Basic authentication is a legacy authentication method that sends usernames and passwords in plain text over the network, making it vulnerable to credential theft, phishing and brute-force attacks. To improve the protection of users and institutional data, Microsoft is retiring Basic authentication for Client Submission (SMTP AUTH) and encouraging the use of modern, more secure authentication methods such as OAuth.
After the retirement, connection attempts using Basic authentication will fail with the following error:
550 5.7.30 Basic authentication is not supported for Client Submission.
Who is affected
Any user, device or application that sends email through Exchange Online using Basic authentication with SMTP AUTH.
Microsoft has confirmed that Basic authentication activity was detected in our tenant between October 20 and October 24, 2025. Targeted emails will be sent to mailbox owners identified with Basic Auth activity.
Action required
-
- If you manage applications, devices, or scripts that send email using SMTP AUTH, confirm whether they use Basic authentication.
-
- If the application supports OAuth, update the configuration to use OAuth.
-
- If the application does not support OAuth, you must transition to an alternative method of sending email, such as:
-
- Using Microsoft 365 High Volume Email for internal-tenant email.
-
- Using an on-premises Exchange relay if you operate in a hybrid configuration.
-
- Using a supported third-party solution if neither option is suitable.
-
- Please review the official Microsoft announcement for detailed recommendations and available resources related to this change.
Timeline
-
- March 1, 2026 – Microsoft begins gradually rejecting a percentage of Basic authentication SMTP AUTH connections.
-
- April 30, 2026 – Microsoft completes retirement. All Basic authentication SMTP AUTH connections will be rejected.
If you have any further questions or concerns, please submit a ticket to the Enterprise Service Centre at (https://uoft.me/m365help).
Kind regards,
Enterprise Applications & Solutions Integration (EASI)
Information Technology Services, University of Toronto