Multi-factor authentication on O365

[jonxs]

I wanted to use TbSync with an O365 business account. I use MFA/2FA on this via Azure MFA. I tried using an app password or my standard password (to await a second authorisation) but neither worked.

TbSync version: 0.7.22
Thunderbird version: 60.4.0

[ ] Yes, I have installed the latest available (beta) version from
https://github.com/jobisoft/TbSync/releases
and my issue is not yet fixed, I can still reproduce it.

Expected behavior

To authenticate and allow TbSync to function

Actual behavior

Unable to authenticate

Steps to reproduce

...

To help resolving your issue, enable debug logging (TbSync Account Manager -> Help) and send me the debug.log via e-mail (use the title of your issue as subject of the email).

[jobisoft]

Can you provide a test account with 2FA for me to see what is going on by myself?

[jobisoft]

Moving this to the EAS provider...

[jobisoft]

A user reported, that it should work with an app Password. Can you retry?
#46

[here-abarany]

From what I understand the app password only works when using Azure MFA. When using third-party MFA (e.g. Duo) you cannot use an app password. TbSync (and/or Thunderbird core?) would need to implement Active Directory Authentication Library (ADAL) in order to support all the different MFA services that Office 365 supports.

Modern Authentication
ADAL libraries

[runekaagaard]

I can confirm it works with a generated app password. It took about an hour after I made the app password for Microsoft to allow the connection.

[jobisoft]

The latest beta now has support for Office 365 OAuth support, which schould work with MFA.
#87 (comment)