Solved Microsoft Office 365 OAuth support

srart

From the docs it looks like it should be very similar to setting the oaut for gmail, but without the need for the cert.
https://docs.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oauth

So my work email is [email protected], but the servers are all outlook.office365.com.

Not sure how/what thunderbird does, but putting in the work email it said something about ISP list and got the server stuff, still had to manually set it to oath2.

gmg

@olohal @josalshep @mozzer @Vivaldson @pafflick @Ayespy

So the issue with Outlook/Hotmail/Office365 accounts having to log in everytime on restart has been fixed in the snapshot from May 24th

[Mail] Microsoft mail authentication popup is shown too often (VB-84230)

Will go out in next stable.

If there are any other issues please let us know

edwardxi

Does Vivaldi mail support OAuth2 method?
Can't find the option to select when adding an account...

Ayespy

@edwardxi OAuth should be automatic unless you turn it off.

edwardxi

@ayespy Thanks, Ayespy.
When I tried adding my account(Office365), there was not option to choose "OAuth2" as Authentication Method. It just logged in using account and password without going through 2-Factor Authentication...
Does that mean I can't use Vividal mail anymore since employer is gonna turn down all access without gong through 2-Factor Authentication?

Ayespy

@edwardxi I'm not familiar with how Outlook/Office365 does things. I seem to recall that for instance, signing in to GMail, "use OAuth" is selected by default and you have to deselect it. My non-GMail accounts do not have that box, which tells me Vivaldi's client detects when the option is present

I could swear that I have seen users here commenting about signing in to their Outlook accounts using OAuth. I may be wrong.

edwardxi

Thanks, Ayespy.
Let's see whether somebody else could chime in

gmg

@srart @edwardxi @Ayespy

M3 supports OAuth for Gmail, Outlook, Office365, Yahoo, Hotmail (their equivalent servers).

For custom domains you need to input the stuff manually and check the "Use OAuth" (which will appear if you put for example Office365 in both the ingoing and outgoing server).

P.s. We plan on making custom domains easier with reading the MX records automatically and finding the equivalent servers

edwardxi

Thank you very much, @gmg
after upgrading to the latest version, I now see "OAuth" option!!!

serquicia

Have you been able to connect with outh to microsoft 365 account?

I put all the config information, it goes to microsoft to authenticate, I allow the access to Vivalvi, it finished but in the mail config is keeps "trying to authenticate".

smerugu28

@srart Organizations won't allow any third party app to be accessing the emails. I tried and it was blocked by my org

mozzer

OAuth in Vivaldi is not working for me. The request was sent to my company but after approval Vivaldi keeps trying to confirm permissions.

dwaring87

I cannot add an Office365 mail account using OAuth.

Adding a mail account with the "Use OAuth" option checked will bring up a login screen to log in to my Office365 account. Then, I approve the Vivaldi app and its permissions. At this point, the mail settings hang at "Attempting sign in...".

The mail log shows a warning:

[]oAuth getTokens response

The network request to Microsoft to get the OAuth token has this response:

{
    correlation_id: "582db602-1b8f-497b-bb4a-5e50a72a2ead",
    error: "invalid_request",
    error_codes: [
        9002326
    ],
    error_description: "AADSTS9002326: Cross-origin token redemption is permitted only for the 'Single-Page Application' client-type.\r\nTrace ID: 963f56d8-4a05-479a-bf05-051e62db1200\r\nCorrelation ID: 582db602-1b8f-497b-bb4a-5e50a72a2ead\r\nTimestamp: 2022-04-22 14:20:30Z"
    error_uri: "https://login.microsoftonline.com/error?code=9002326",
    timestamp: "2022-04-22 14:20:30Z",
    trace_id: "963f56d8-4a05-479a-bf05-051e62db1200"
}

RealMat0s

Hello @dwaring87

In the Vivaldi configuration options there is an option corresponding to Google services.

I recommend you to activate it or check if you have it activated. That may cause an error in your synchronization with Gmail.

Privacy - Google Services

cynical13

@realmat0s Why would you need to enable Google services for a Microsoft email?

luetage

@cynical13 This is enabled by default on all other Chromium browsers. I have no idea about Office365, but since Edge is Chromium too it’s likely the account relies on the crypto token for OAuth purposes. Simply try it, would be my suggestion. You will need to restart browser after enabling the option.

cynical13

I locked down Google on my browser.

Have you tried accessing Microsoft mail without the OAuth option? I have three Hotmail addresses and I've got all of them logged in.

If it's a work email account, your company might have options locked down. I know I can't access my work email through anything but Windows Mail or Outlook.

Vivaldson

I've been using Vivaldi's mail system for a few months now, and one small issue has been bugging me.

Every time I reboot the computer, upon turning it on and opening Vivaldi, I'm prompted by MS outlook's password prompt. This does not happen when I restart Vivaldi without shutting off the PC.

I've searched the forums and couldn't find anything similar, does anyone have more information on this and/or know how to solve it?

pafflick

This issue has been reported already as VB-84230. Our developers are looking into it. Thank you for your patience.

josalshep

Hi VS
I have 4 email accts. and every day only when I first open the PC and Vivaldi, the Microsoft outlook.com asks me for the password whereas the others all connect perfectly.
is there a simple thing I'm doing wrong or some other reason?
tx
joshep

Ayespy

@josalshep Yes, there is something you're doing wrong.

You're using outlook.com. Sorry, joking.

All 5 of my accounts stay logged in and if 3 out of your 4 stay logged in, it sounds like it may be something peculiar to outlook.com - like not setting a durable cookie like the rest of them do.

Perhaps one of our mail gurus @gmg ? could offer a more informed opinion.