For any of you sending emails from Kinetic using 365 and basic-auth SMTP

Kinetic ERP
1

Microsoft Message ID: MC786329

Exchange Online will retire Basic Auth for Client Submission (SMTP AUTH) starting March 1, 2026, with full rejection by April 30, 2026. Customers must switch to OAuth or other alternatives. The SMTP AUTH Clients Submission Report now includes an Authentication Protocol column to assist in this transition.

2

:clap: Should have happened a long time ago.
Microsoft is also putting limits on bulk mail through M365.

3

True…it’s a security gap that needs to be filled in. We’re running 3p-hosted on-prem so I’m not TOO worried. Then again, the host has Crowdstrike and we know how well that worked about 11 months ago. Happy Anniversary! :tada:

4

I set up MSGraph / M365 auth in my Pilot a couple days ago.

Seems to work fine, and the instructions were decent.

5

Will keep that in mind - thx

6

Something else to keep in mind if you’re using M365 for email, there are new limits on how many one can send:

…
Below are the new maximum tenant external recipient rate limits:

  • Trial tenants: Limited to 5,000 total external recipients per day, regardless of license count.
  • Non-trial tenants: Daily outbound limit is based on the tenant’s email licenses (any Exchange Online or Exchange Online Protection license). More licenses increase the number of external recipients your tenant can send to per day, but at a decreasing rate per license. By late February you’ll find your tenant’s TERRL in the Tenant Outbound External Recipients report in the EAC Reports > Mail flow section. You can also use the following formula to determine your tenant’s TERRL:

500 * (Number of Non-trial Email Licenses^0.7) + 9500

Sample limits for tenants with various license counts are shown below:

image
image455Ă—325 4.35 KB

If your tenant exceeds its daily outbound sending limit subsequent messages sent to external recipients will be blocked and senders will receive one of the following bounce messages (also known as Non-Delivery Receipts or NDRs):

  • Trial tenants: 550 5.7.232 - Your message can’t be sent because your trial tenant has exceeded its daily limit for sending email to external recipients (tenant external recipient rate limit)
  • Non-trial tenants: 550 5.7.233 - Your message can’t be sent because your tenant exceeded its daily limit for sending email to external recipients (tenant external recipient rate limit)

…

7

We’re on the smaller side for volume so I don’t think it’ll be an issue. Appreciate the heads-up

8

Got the M365 auth set up in our Pilot now…a little back and forth between our consultants and MSP…so far so good.

EDIT - and we’re live. No issues so far, already seeing some emails gone from BPMs as well as regular menu items (stock status, SO acks). @klincecum - you were dead on with the MSGraph/365 stuff…instructions were solid, only took a couple of tweaks as we went along.

9

I couldn’t tell you the details on this, but there has been some version of outbound rate limiting in place for at least a few years now. We’ve been burned a few times by the Mass Print AR Invoices screen where the wrong filters were used and it tried emailing out 50,000 invoices in one print job…

10

Friday Movie Damn GIFs | Tenor

11

SendGrid… Microsoft doesn’t want you using Exchange for that. They’ve had recipient limits for years now.

12

Any chance you have instructions on how to do this?

13

I will park this here for anyone that needs instructions:
Knowledge Search Articles - EpicCare