Author: Chris Fouracre

CIS PhD email alias sending broken due to Two-Factor authentication deployment -7/21/20

Chris Fouracre Service Change

Cornell recently turned on two-factor authentication for all student accounts:
https://it.cornell.edu/news/two-step-login-authentication-will-be-added-office-365-login-students-monday/20200716

A side-effect of this is that now external SMTP and IMAP clients (like GMail) no longer work to send from @cs.cornell.edu and @infosci.cornell.edu email aliases

  • Currently there are a few work-arounds:
    • Use Mail client like Outlook, or Apple Mail…others listed at link above.
    • Use Outlook Web Access: http://outlook.cornell.edu
      • When authoring a new message in OWA, click the … at top of message and choose Show From.
      • Then add @cs alias if it isn’t already populated.
        • Click the three dots at top of email and choose Show From Enter your email alias in the now-visible From Field
    • Use Thunderbird (version 77+) to configure IMAP account with following settings:
      • Incoming – IMAP
        • Server: outlook.office365.com
        • Port: 993
        • Username: netid@cornell.edu
        • Security: SSL/TLS
        • Authentication method: OAuth2
      •  Outgoing  – SMTP
        •  smtp.office365.com
        • Port: 587
        • Security: StartTLS
        • Authentication Method: OAuth2
        • Thunderbird IMAP settings supporting Two Factor AuthenticationThunderbird SMTP settings supporting Two Factor Authentication