Email Modern Authentication
If you check your mail from an email program that uses an older method of authentication, you will need to take action before Oct. 1, 2022, to ensure continued access to your Stanford email on all of your devices. Please review the following information about email clients and their specific configuration requirements.
Beginning Oct. 1, 2022, Microsoft will enforce modern authentication when you access your Stanford email account through Microsoft 365. While most email accounts at Stanford are already using modern authentication, many are still accessible without the protection of two-step authentication, leaving them highly vulnerable to compromise.
Securing Your Stanford Email
University IT (UIT) now requires two-step authentication when you access your Stanford email account through Office 365. This change ensures that you access your email securely from all your devices.
To enable two-step authentication, all email, calendar, contacts, and other information that are synced from your Stanford Office 365 account will be updated.
- Why we are making this change
-
Stanford uses two-step authentication to protect your SUNet ID and password by asking you to verify your identity with input from another device such as a mobile phone or a security token, or through Cardinal Key. Until now, this two-step authentication has been optional on Stanford email accounts, due to limitations in the third party software that supports email at Stanford.
Over the past two years, companies such as Apple, Microsoft, and Google have updated their applications and operating systems to support modern authentication methods when checking email, including two-step authentication.
Stanford is now requiring two-step authentication for all methods of accessing email. This change affects current users of Office 365 email, calendars, and all other online services associated with Office 365.
- Who is affected
-
This change affects students, faculty, and staff at Stanford who use Office 365 through an email client on their desktop or mobile device. Your account will not be affected if you access your Outlook email through a web browser (using Webmail, the web-based email client for Office 365).
If you use Google Mail (through G Suite) to access your email, details on how to prepare for this change are coming soon.
- How to prepare for this change
- If you use Office 365 (Microsoft Outlook) via desktop or mobile clients, you should take these steps before your account is updated:
- To speed the change, connect your device to WiFi (vs. cellular data service).
- Establish an alternative way to check your Office 365 email and calendar while the change is applied, such as checking email directly via Webmail. Webmail will be fully accessible throughout the transition.
- Ensure that your device’s system meets the necessary requirements (see the System Requirements section below).
- What to expect if you access your email on your mobile device, laptop, or desktop
-
- iOS: If your iOS device is not enrolled in Stanford's Mobile Device Management (MDM) (either Jamf for iOS or Airwatch), and you have an issue with your email after the time the change is scheduled, you may need to reconfigure your email manually.
- Android: Whether or not your Android device is enrolled in MDM, you may need to reconfigure your email manually.
- Laptops, desktops, and VDIs:
- If you use Windows, in most cases this change should happen automatically.
- If you use macOS and you purchased your device within the last two years, in most cases this change should happen automatically.
- If you use Linux and you have difficulty accessing your email, you may need to reconfigure your email manually.
Refer to the email configuration guidance section for more information information about email clients and their specific configuration requirements.
System Requirements
To update your Office 365 information on your device, your device’s system must meet the following requirements.
If your device does not meet these system requirements, you will need to update to a supported operating system and client version, install Outlook, or use Webmail to access your email account.
Mac and PC computers
- Microsoft Office 2016 or higher for Windows or macOS
- macOS native mail client on systems running macOS 10.14+ (Mojave) or newer
(Note: macOS 10.14 is no longer supported by Stanford or Apple but will technically work with modern authentatication. Before upgrading, you may want to review system checks to ensure a smooth macOS upgrade.) - Use of a modern, up-to-date web browser, such as Chrome, Firefox, or Internet Explorer for web-based access to email and Office 365
Mobile devices
Requirements for mobile devices enrolled in Stanford's Mobile Device Management (MDM):
- Latest version of the Microsoft Outlook app from the iTunes or Google Play Store
- iOS 13.0 or higher native mail client
Requirements for devices not enrolled in MDM:
- Latest version of the Microsoft Outlook app from the iTunes or Google Play Store
- iOS 13.0 or higher native mail client
- Android 8 or higher native mail client
Email Configuration Guidance
If you check your mail from an email program that uses an older method of authentication, you will need to take one of two actions before Oct. 1, 2022, to ensure continued access to your Stanford email:
- Reconfigure your email client (for clients that support modern authentication). Please review the information below about email clients that do support modern authentation and their specific configuration requirements.
- Switch to another email client (for clients that don’t support modern authentication). Email clients that are not listed below (e.g., Eudora) do not support modern authentication. This will require users to switch to another email client that does support modern authentication, or what also may be described as "OAuth2."
When enforcement begins in October, email clients that use the legacy authentication will stop working. For additional support around email configuration, please submit a Help request.
Modern Authentication-Supported Email Clients
Apple Mail
All supported versions of macOS (10.15 and later) support modern authentication. However, systems that were upgraded from previous versions may still be using an older configuration. In this situation:
- Go to System Preferences > Internet Accounts.
- Remove your Stanford account.
- Follow these steps to create a new configuration.
NOTE: These steps only apply to users who have Apple Mail configured to connect to an Exchange server. If your Apple Mail is configured to use POP or IMAP, disregard these steps and submit a Help request for assistance.
iOS Mail
All supported versions of iOS (13 and later) support modern authentication. However, systems that were upgraded from previous versions may still be using an older configuration.
If you use multiple iOS devices, follow these instructions to help identify which of your iOS devices will need to be updated to use modern authentication.
To update your iOS device to use modern authentication, follow these instructions:
- Go to Preferences > Mail > Accounts.
- Remove your Stanford account.
- Follow these steps to create a new configuration.
Thunderbird
Thunderbird users should make sure their Thunderbird email client is configured according to these instructions.
Outlook
If you use any of the following email clients to access Stanford email, no action is needed on your part:
- Outlook for Windows 2016 and later
- Outlook for Mac 2016 and later
- Outlook for Mobile
- Webmail (https://webmail.stanford.edu)
Additional Support
Can't get to your email?
If you are unable to access your Stanford email after reconfiguration, you have multiple options for checking email until the problem is resolved:
- Use the webmail interface at https://webmail.stanford.edu.
- Use the Outlook client/app (if not already installed, the Outlook app is available via the Stanford app catalog on your mobile device).
- Submit a Help request for additional support.
Resources and help
- If you have questions about email authentication or need help, please submit a Help request.
- See workarounds for an issue on the Known Issues page.
- Review Frequently Asked Questions about Modern Email Authentication