Error connecting to bounce 365 Microsoft account

webuniverse

How can I connect bounce handling to an Office365 server?

I always get error messages. Is Oauth still not available in Acymailing Bounce?

Fehler beim Verbinden zu {outlook.office365.com:993/ssl/novalidate-cert/service=imap}
Retrying PLAIN authentication after AUTHENTICATE failed.
Retrying PLAIN authentication after AUTHENTICATE failed.
Can not authenticate to IMAP server: AUTHENTICATE failed.

Thanks for help
Corinne

mihha

OAuth is not yet available in the bounce handling, but you can use Method 1 explained in the following article
https://docs.acymailing.com/setup/configuration/mail-configuration/set-up-oauth-2.0#outlook

Method 1 is authentication method using App password

lakewood

I'm also having the same issue as Corinne, and it seems that using an App Password is no longer an option since Microsoft has disabled Basic Authentication in Exchange Online: https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online It would be helpful if anyone else in the forum has found a solution or workaround for this problem, as it seems that OAuth 2.0 is recommended by Microsoft as the modern authentication method.

addlink

We have the same issue aswell. Anyone found a workaround? We need a way to deal with our bounced emails.

jimhill10

I too am waiting for OAuth2 authentication using IMAP for Microsoft 365 inside of AcyMailing as we are moving away from using non Microsoft 365 email servers. In the meantime, in my opinion, it seems that the AcyMailing settings allow me to use any IMAP mailbox. So I am just going to set up a subdomain for my main domain and then host that email on one of my dev servers until AcyMailing rolls out the OAuth 2.0 support, which I am guessing they will do. Does anyone see an issue with doing it this way? I have not yet tested it.

To do this I will change the bounce email address which is set under Mail Settings, then configure the Bounce Handling section to add my temporary IMAP account which I created for that subdomain. I will use something like bounce.mydomain.com. There is no reason that this could not be a long term work around but knowing how AcyMailing operates I am certain that they will have OAuth 2.0 working for to allow us to configure Microsoft 365 email connections sometime soon.

mihha

I am sorry to say, but as long as PHP doesn’t develop OAuth for IMAP functions it won’t be possible in AcyMailing to use OAuth with bounce handling

https://www.php.net/manual/en/function.imap-open.php#127159

We need to change the IMAP library for php-imap, but it means changing a lot of code

I am sorry, but as you can see, for now, this is not possible in a reasonable timeframe

jvstratum

@webuniverse @lakewood @addlink @jimhill10

I wanted to suggest a workaround for the issue you are experiencing. You can create a mail-flow rule in Exchange to forward all the mail from your bounce mailbox to a non-O365 mailbox. After that, you can configure Acymailing to handle bounces from the non-O365 mailbox. This will allow you to use your O365 bounce address as well as Acymailimng's automatic bounce handling.

jimhill10

JVSTATUM's way would surely work. For now this is what I did as I am moving most of my email accounts away from IMAP. I created a hosting account on one of my dev servers which hosts email for the domain bounce.domain.com. I then created an email "bounce@bounce.domain.com" with the IMAP account and then entered the credentials into AcyMailing bounce configuration mailbox. Because I use Amazon SES I then there and confirmed the new domain and email address so that it can send on behalf of them. Finally, I changed my bounce email address in AcyMailing and it all is working fine. I still have to live with this one IMAP account, but the main email is now going through Microsoft 365.

jvstratum

jimhill10

I wanted to confirm my understanding of the situation. It appears that the bounce address has been changed to a different domain than the one emails are being sent from. In order to maintain DMARC compliance, it's important for the FROM, REPLY-TO, and BOUNCE addresses to have the same domain.

To ensure compliance, I suggest keeping the bounce address that matches your domain, setting up a forwarder to send the bounces to a non-O365 address, and configuring the bounce handling to use this non-O365 mailbox.

jimhill10

Thanks, that makes sense @jvstratum