Hi, does anyone have any suggestions or a workaround for the cfexchange basic authentication issue? Adobe released a fix but it’s not working for us. cfexchange is login into the user’s mailbox account that is logged into the website. It’s not logging into the account being passed in the cfexchange username attribute. In addition, when the user is not logged into the site, cfauth will display a prompt for the user to log into the account. This solution doesn’t work if it’s being used in a scheduled task. The task should be able to log into the account specified with no user intervention. There’s currently a lot of manual work being involved to make this to work. I have a case open with CF support and an incident. I was told this was going to take time. Any help is greatly appreciated!

I've been beating my head against a wall on this since the beginning of the year. Maybe we can make a space somewhere for all of us to pull our hair out together?

It’s a good idea Brian. I was hoping someone in this group would have figured out something by now 😢

I've been working on this problem in a non-cf context for a while, and Microsoft has really made things stupidly difficult. They've only enabled the OAuth workflows that require some kind of user interaction. The supported way of doing this via a machine account appears to involve creating an application in the Azure Cloud that has access to all accounts with no authentication, and then limiting which accounts it can really access via an ADS group... It's like automated tasks weren't a consideration they had when designing this, or they were explicitly aiming to make them impossible...

So far I believe I've been able to successfully get the authorization code and the token, but am failing when I try to open the IMAP connection. Should we create a new Slack channel for this? Adobe's ticketing system being down certainly isn't helping any.

@Tim does your non cf context work?

no, i haven't managed a working example yet.

It depends which server I specify in the imap connection. Either "Connection reset" or "Couldn't connect to host".

Check your logs, more than likely your box has OLD ssl root certs, and needs updated. Update your java version to the absolute latest supported version of your CF ENGINE Instance. If you can not update something as its "Out of date" or "END OF LIFE", yo need to upgrade your platform anyways. the command usually is something like keytool -keystore $JAVA_HOME/jre/lib/security/cacerts -list to SHOW WHICH ONES YOU HAVE. More than likely you have one or more outdated certs, which breaks crap. Now using firefox, or lynx or get, go download the new certs and add them to the keystore. Afterwards, you can restart your application engine and you should correct the CFEXCHANGE isnt talking nicely with "MyCrappyExchangeBox"

I think I was able to get this working. Are you connecting to an account that is hosted at Azure?

I am, yes. What magic did you use?

https://www.codewrecks.com/post/security/accessing-office-365-imap-with-oauth2/ That article along with some others seemed to have what I needed.

Okay, I'll have a look at it and see what happens. Thanks!

I can post the code also. It will just take me a few minutes to edit out some security details

Thank you!