Skip to main content

Email Modern Authentication

Use two-step authentication for more secure email

If you check your mail from an email program that uses an older method of authentication, you will need to take action before Oct. 1, 2022, to ensure continued access to your Stanford email on all of your devices. Please review the following information about email clients and their specific configuration requirements.  Beginning Oct. 1, 2022, Microsoft will enforce modern authentication when you access your Stanford email account through Microsoft 365. While most email accounts at Stanford are already using modern authentication, many are still accessible without the protection of two-step authentication, leaving them highly vulnerable to compromise. 

Securing Your Stanford Email

University IT (UIT) now requires two-step authentication when you access your Stanford email account through Office 365. This change ensures that you access your email securely from all your devices.

To enable two-step authentication, all email, calendar, contacts, and other information that are synced from your Stanford Office 365 account will be updated.

Why we are making this change

Stanford uses two-step authentication to protect your SUNet ID and password by asking you to verify your identity with input from another device such as a mobile phone or a security token, or through Cardinal Key. Until now, this two-step authentication has been optional on Stanford email accounts, due to limitations in the third party software that supports email at Stanford.

Over the past two years, companies such as Apple, Microsoft, and Google have updated their applications and operating systems to support modern authentication methods when checking email, including two-step authentication.

Stanford is now requiring two-step authentication for all methods of accessing email. This change affects current users of Office 365 email, calendars, and all other online services associated with Office 365.

Who is affected

This change affects students, faculty, and staff at Stanford who use Office 365 through an email client on their desktop or mobile device. Your account will not be affected if you access your Outlook email through a web browser (using Webmail, the web-based email client for Office 365).

If you use Google Mail (through G Suite) to access your email, details on how to prepare for this change are coming soon.

How to prepare for this change
If you use Office 365 (Microsoft Outlook) via desktop or mobile clients, you should take these steps before your account is updated:
  • To speed the change, connect your device to WiFi (vs. cellular data service).
  • Establish an alternative way to check your Office 365 email and calendar while the change is applied, such as checking email directly via Webmail. Webmail will be fully accessible throughout the transition.
  • Ensure that your device’s system meets the necessary requirements (see the System Requirements section below).
What to expect if you access your email on your mobile device, laptop, or desktop
  • iOS: If your iOS device is not enrolled in Stanford's Mobile Device Management (MDM) (either Jamf for iOS or Airwatch), and you have an issue with your email after the time the change is scheduled, you may need to reconfigure your email manually.
  • Android: Whether or not your Android device is enrolled in MDM, you may need to reconfigure your email manually.  
  • Laptops, desktops, and VDIs:
    • If you use Windows, in most cases this change should happen automatically.
    • If you use macOS and you purchased your device within the last two years, in most cases this change should happen automatically.
    • If you use Linux and you have difficulty accessing your email, you may need to reconfigure your email manually.

Refer to the email configuration guidance section for more information information about email clients and their specific configuration requirements.

System Requirements

To update your Office 365 information on your device, your device’s system must meet the following requirements.

If your device does not meet these system requirements, you will need to update to a supported operating system and client version, install Outlook, or use Webmail to access your email account.

Mac and PC computers

Mobile devices

Requirements for mobile devices enrolled in Stanford's Mobile Device Management (MDM):

  • Latest version of the Microsoft Outlook app from the  iTunes or Google Play Store
  • iOS 13.0 or higher native mail client

Requirements for devices not enrolled in MDM:

  • Latest version of the Microsoft Outlook app from the iTunes or Google Play Store
  • iOS 13.0 or higher native mail client
  • Android 8 or higher native mail client

Email Configuration Guidance

If you check your mail from an email program that uses an older method of authentication, you will need to take one of two actions before Oct. 1, 2022, to ensure continued access to your Stanford email:

  • Reconfigure your email client (for clients that support modern authentication). Please review the information below about email clients that do support modern authentation and their specific configuration requirements. 
  • Switch to another email client (for clients that don’t support modern authentication). Email clients that are not listed below (e.g., Eudora) do not support modern authentication. This will require users to switch to another email client that does support modern authentication, or what also may be described as "OAuth2."

When enforcement begins in October, email clients that use the legacy authentication will stop working. For additional support around email configuration, please submit a Help request.

Modern Authentication-Supported Email Clients

Apple Mail

All supported versions of macOS (10.15 and later) support modern authentication. However, systems that were upgraded from previous versions may still be using an older configuration. In this situation:

  1. Go to System Preferences > Internet Accounts. 
  2. Remove your Stanford account.
  3. Follow these steps to create a new configuration.

NOTE: These steps only apply to users who have Apple Mail configured to connect to an Exchange server. If your Apple Mail is configured to use POP or IMAP, disregard these steps and submit a Help request for assistance. 

How to configure Apple Mail »

iOS Mail

All supported versions of iOS (13 and later) support modern authentication.  However, systems that were upgraded from previous versions may still be using an older configuration.

If you use multiple iOS devices, follow these instructions to help identify which of your iOS devices will need to be updated to use modern authentication. 

To update your iOS device to use modern authentication, follow these instructions:

  1. Go to Preferences > Mail > Accounts.
  2. Remove your Stanford account. 
  3. Follow these steps to create a new configuration.

 

How to configure iOS Mail » How to identify which iOS device to reconfigure »

Thunderbird

Thunderbird users should make sure their Thunderbird email client is configured according to these instructions.

How to configure Thunderbird »

Outlook

If you use any of the following email clients to access Stanford email,  no action is needed on your part:

Additional Support

Can't get to your email?

If you are unable to access your Stanford email after reconfiguration, you have multiple options for checking email until the problem is resolved:

Resources and help