Microsoft is retiring Basic Authentication for scan‑to‑email.
What FlexTG customers need to know about Microsoft’s change and the steps to keep scan-to-email working.
Now–December 2026
Basic Authentication for SMTP AUTH continues to work.
End of December 2026
Disabled by default for existing Microsoft 365 tenants.
New tenants
after December 2026
Unavailable by default. OAuth 2.0 is the supported method.
Second half of 2027
Microsoft will announce the final removal date.
Am I affected?
This is a Microsoft change, not a FlexTG change. You may be affected if your organization uses Microsoft 365 or Exchange Online and any of the following send email with a saved password.
Not this change: Google Workspace customers are not affected by this Microsoft change.
Two audiences. Clear next steps.
For IT and email administrators
Start with the device maker’s instructions. Update firmware, configure OAuth 2.0, and test scan‑to‑email before December 2026.
- Use the Exchange admin center SMTP AUTH clients report to identify accounts still using Basic Authentication.
- Follow the manufacturer’s official model-specific guidance.
- If a model will not support OAuth 2.0, work with your email administrator and FlexTG on a supported alternative, such as a Microsoft 365 SMTP relay connector or the manufacturer’s connector utility.
For everyday users
You may notice that a scan does not arrive. Affected devices can return the error: 550 5.7.30 Basic authentication is not supported for Client Submission.
- Do not change device email settings yourself.
- Tell your IT or email administrator which device and email function did not work.
- Contact your FlexTG representative if you need help identifying the device.
Find your manufacturer’s fix.
Firmware and OAuth support vary by model. Confirm your specific model on the manufacturer’s page, or ask FlexTG for help.
Plan the update before it becomes a disruption.
Complete device updates well before December 2026 so scan-to-email keeps working when Microsoft disables Basic Authentication by default.
Customer one-pager
Questions, answered.
Why is Microsoft making this change?
Microsoft is moving away from saved passwords for SMTP AUTH. OAuth 2.0 uses short-lived tokens issued by Microsoft Entra ID.
Will scan-to-email stop working today?
No. Microsoft says behavior remains unchanged through December 2026. FlexTG recommends preparing well before then. After the end of December 2026, administrators can temporarily re-enable Basic Authentication, but Microsoft will announce a final removal date in the second half of 2027, so treat that as a bridge, not a fix.
Does every device need an update?
Support varies by manufacturer and model. Check the official manufacturer guidance for the exact device.
What if our device does not support OAuth 2.0?
Ask your email administrator and FlexTG about a supported alternative, such as a Microsoft 365 SMTP relay connector or a manufacturer connector utility.
Does this affect Google Workspace?
No. This page addresses Microsoft’s Exchange Online and Microsoft 365 SMTP AUTH change.