- Changes to Email sign-in – Summer 2022
- How do I know if I am still using Basic Authentication?
- Updating your email application to use modern authentication
- Removing and re-adding email accounts
- Outlook (Windows or Mac)
- Apple Mail
- Apple iOS Mail, Calendar and Contacts
- Android Mail
- Gmail for Android
- Mozilla Thunderbird
Changes to Email sign-in – Summer 2022
Microsoft is making changes to how users sign into their Office 365 email accounts. Most users will be unaffected, but if you are using an older email app or device to access email, you may need to update your settings, or, if you are using a very old email app, you may need to switch to a different email app.
Basic authentication and security
Basic authentication is an old sign-in method where the application sends a username and password with every request, and those credentials are also often stored or saved on the device. Basic authentication does not support the use of multi-factor authentication (MFA). Basic authentication is one of, if not the most common ways Universities get compromised, and these types of attacks are increasing; every day Queen’s has basic authentication enabled, we are at risk from attack.
Later this year, Microsoft will switch off basic authentication and any software using this method will no longer be able to access QUB email. Modern authentication is the replacement for basic authentication and offers a number of benefits, including support for MFA. Modern authentication is not subject to credential capture and re-use, credentials are not stored on the client device, it ensures users re-authenticate when something about their connection or state changes, and it makes adding MFA simple.
Almost all modern email apps will already be using modern authentication. If your device supports modern authentication but is still using basic authentication to sign in, you can update it by simply removing and re-adding your account on the device (see below for more information).
How do I know if I am still using Basic Authentication?
Applications which are confirmed not to support modern authentication are listed below.
- Microsoft Outlook older than Outlook 2016 or Outlook for Mac 2011
- Apple Mac Mail older than macOS 10.14 (Mojave)
- iOS older than version 11
- Built-in Mail app on some older Android phones
- Mozilla Thunderbird older than v78
- Older email clients using IMAP which do not support OAuth
If you currently use one of these, you will need to switch to a modern email application or use a web browser to continue to access your QUB email. Information Services recommends these email applications for best performance with Office 365:
- Outlook 365 for Windows and Mac available to all staff and students at https://office365.qub.ac.uk
- Outlook for Mobile for iOS and Android available for free at https://www.microsoft.com/en-us/microsoft-365/outlook-mobile-for-android-and-ios
- Thunderbird for IMAP users, version 91 available for free at https://www.thunderbird.net/en-GB/
Over Summer 2022, Information Services will be in contact with all Users who are still using basic authentication to prompt you to switch to modern authentication.
Updating your email application to use modern authentication
If you have received a notification that your account is using basic authentication, you should try removing your account from your email app(s) and re-adding it. Often this will be the only action required.
Email stored in your mailbox will be unaffected when you remove the account from your app(s). If you have any drafts or other data stored offline (e.g., in your Outbox) please make sure you back these up before removing your account.
Detailed instructions on removing and re-adding accounts are available below
If you have any problems removing and re-adding your account, please contact your School Computer Office or the IT Service Desk
Removing and re-adding email accounts
View the instructions below to remove and re-add the following email accounts:
Outlook (Windows or Mac)
- Download and install the most recent version of Microsoft Office available at https://office365.qub.ac.uk
- Once installed, open Outlook and follow the prompts to set up your email account
Apple Mail
- In the Mail app, choose Mail > Preferences > Accounts
- Choose your QUB email account
- Choose Remove ( — )
- Choose Mail > Add Account
- Choose Exchange
- Enter your QUB email address, username and password when prompted
- Complete multi-factor authentication
- Confirm that your QUB account appears in the Mail app
Apple iOS Mail, Calendar and Contacts
- Go to Settings > Mail
- Tap your QUB email account (often named “Exchange”)
- Tap Delete Account
- Tap Accounts > Add Account
- Choose Microsoft Exchange
- Enter your QUB email address and a name for the account
- Choose “sign in” when prompted
- Sign in with your QUB username and password
- Complete multi-factor authentication when prompted
- Confirm that your QUB account appears in the Mail app
Android Mail
Steps may vary depending on phone manufacturer and operating system
- Go to Applications > Email > Settings
- Tap Accounts
- Press and hold your QUB account (often named “Exchange Account” or “Corporate Account”)
- Choose Remove Account and confirm that you want to remove the account
The mail app provided on Android varies between manufacturers. If using the built-in mail application on Android, you will need to download the Outlook for Mobile or Gmail applications as the built-in app does not support modern authentication.
Gmail for Android
- Tap the Gmail app
- Tap your profile picture in top right corner
- Tap Manage accounts on this device
- Choose your QUB email account
- Tap Remove Account
- Tap Add another account
- Choose “Outlook, Hotmail and Live”
- Enter your QUB email address, username, and password
- Complete an MFA request when prompted
Mozilla Thunderbird
- Choose Tools > Account Settings
- Choose your QUB account
- Choose Account Actions > Remove Account
- Choose OK to confirm
- Restart Thunderbird
- Choose Tools > Account Settings
- Choose Account Actions > Add Mail Account
- Enter your name, email address and password
- After autoconfiguration has run, manually configure the account with these settings:
Incoming
Type: IMAP
Server hostname: outlook.office365.com
Port: 993
SSL: SSL/TLS
Authentication: OAuth2
Username: staffnumber@ads.qub.ac.uk OR studentnumber@ads.qub.ac.uk
Outgoing
Server hostname: smtp.office365.com
Port: 587
SSL: STARTTLS
Authentication: OAuth
Username: staffnumber@ads.qub.ac.uk OR studentnumber@ads.qub.ac.uk
10. Click Done
11. Complete sign in and MFA authentication when prompted