Office 365 vs Multi Factor Authentication not working anymore

[mve]

First of all, it's sort of a duplicate of https://www.aqua-mail.com/forum/index.php?topic=5771.msg38149. (And I am a paid user if it matters)

After a fix was made in January, authentication to Office 365 started working for me (with an authentication in external browser window), and it worked for some time. After that it stopped. I still go through authentication window but then I am told that the device is not configured properly.

Since it's not an AquaMail issue, I've worked with my company's support and their response was that most probably AquaMail uses an old version of ADAL library to authenticate to Office 365, and the fix would be to move AquaMail to the latest version. (I don't know if AquaMail uses ADAL, or something else, sorry...)

Can you consider to make this fix? (Obviously, I'd be glad to test private build!)

Thanks!

[Kostya Vasilyev]

We don't use ADAL at all.

But - your company most likely started requiring so called InTune authentication.

We do not support this authentication option at this time, sorry.

We're planning to and hopefully reasonably soon.

Our Project Manager is aware of this.

[mve]

Thanks Kostya!

Yes, that's exactly why. Intune/Conditional Access became mandatory, and authentication fails.
Per my understanding, ADAL is the way to go for all Office 365 scenarios.
Great to hear that your team is aware of the fix, please keep me posted 

And thanks a lot for the great product and support.

[Kostya Vasilyev]

Re: Yes, that's exactly why. Intune/Conditional Access became mandatory, and authentication fails.

FYI - working on this (InTune / Conditional Access) right now.

[mve]

Please let me know when you have a beta to try! 

[Kostya Vasilyev]

InTune support has been posted under "development builds" for 2-3 months now

https://www.aqua-mail.com/forum/index.php?board=9.0

Feel free to grab the latest 1.17.0-dev.

[mve]

Thanks Kostya.

Yes, it works now in 1.17.0-1212-dev.

I found a problem... After a password change I get a "OATH2 returned something strange" (or something like that) and I cannot re-authorize.
There is no option for updating authentication, and even in the account settings I cannot do anything (any attempt to update account results in the same 'something strange' message box, with no way to invoke authentication again.

I manage to work it around by adding the 2nd account for the same mailbox. It allowed me to go through authentication again, and unblocked the 1st account as well.
As a consequence, I cannot reproduce the problem and collect logs for it :-(.

[mve]

I've actually managed to reproduce the problem, and emailed log to support.

[Kostya Vasilyev]

Спасибо за лог. У Вас довольно старая версия 1.17.0-1212.

Данная проблема уже исправлена в версии 1.17.0-1217.

Здесь на форуме есть и более новые версии.