Configure an email inbox watcher via POP3/IMAP with Microsoft 365 email server and Modern Authentication

This topic describes the second part of the fourth configuration task in the process of setting up email watchers to use modern authentication.

Perform this task in the eCopy ShareScan Administration Console after you have successfully

• registered a Microsoft 365 application for Token Vault through the Microsoft Identity Platform (Azure Active Directory) admin center
• registered a Microsoft 365 authorization provider with Exchange scope set in Token Vault
• authorized Token Vault in Microsoft 365, and
• configured Token Vault settings in the ShareScan Administration Console under Advanced > Tools.

To configure an eCopy ShareScan POP3/IMAP email inbox watcher with Microsoft 365 email server and modern authentication, perform the following steps:

1. Open the Watcher wizard of a POP3/IMAP email inbox watcher.
2. Enter the Microsoft 365 POP or IMAP server fully qualified name and port as E-mail server and Port and select SSL/TLS as Security.
3. Configure the Use Modern Authentication setting as Yes.
4. Select the Authentication method and specify the user credentials under the Token Vault setting group.

   If you select Password as Authentication method, type in User name, Password and Domain.

   If you select One-time passcode as Authentication method, specify the User name in User Principal Name (UPN) format.

   Verify that this user has previously authorized the Token Vault in Microsoft 365 through a Token Vault Microsoft 365 authorization provider – as described in Authorize a Microsoft 365 provider in Token Vault.
5. Click Next to test the configuration. If you selected One-time passcode as Authentication method, specify a valid One-time passcode, which was generated by Token Vault or an authenticator app set up on the Token Vault UI, on the One-time passcode dialog and click OK. (If the above authorization was not completed before the test, this test fails).
6. Continue the watcher configuration on the other wizard pages. Once these configuration steps are also complete in the wizard, the use of modern authentication in the POP3 or IMAP email watcher is operational.