My Oracle Support Banner

EBS Workflow Mailer Configuration with OAuth 2.0 Token-Based Authentication for Cloud-Based Email Services (Gmail, Yahoo, Office365, etc) (Doc ID 2650084.1)

Last updated on MARCH 24, 2020

Applies to:

Oracle Workflow - Version 12.1.3 and later
Information in this document applies to any platform.

Goal

Is there any solution provided in order to take into account the OAuth 2.0 token-based authentication for EBS Workflow Mailer ?

Configuring an Oracle Workflow Notification Mailer with Cloud E-Mail Servers (Doc ID 2077434.1)  --- uses Basic Authentication and not OAuth 2.0 token-based authentication
    Section 3: Configuring Outbound Notification Mailer Processing
      1.  Navigate to the Basic Configuration Page within the Oracle Workflow Manager component of Oracle Applications Manager ...

>> user/pwd as instructed above is using the Basic Authentication protocol configuration which will not connect any longer with either Gmail, Yahoo or Office365 when the new OAuth2.0 token-based authentication protocol get into effect

For example, the following documents mention setting up Cloud-Based Email services but are instructing either, to use Basic Authentication (username/password) setups, or not mentioning the authentication requirements at all, hence assuming to use the Basic Authentication:
  -  Is Multi Factor Authentication (MFA) Supported to Work with Java Mailer ? (Doc ID 2318926.1)
  -  R12 E-Business Suite Configuring Workflow Mailer with TLS for Microsoft Office365, Gmail, or Cloud-Based Email Services for 12.1.3 and 12.2 (Doc ID 2051827.1)
  -  Workflow Notification Mailer Not Authenticating with SMTP Servers Requiring TLS Before Login (Doc ID 1903575.1) 
etc.

 

GMAIL/YAHOO  - and Other generic Cloud-Based Email Services
==========

Google has recently announced that they will be only allowing connections using OAuth (as opposed to username/password, which they call Less Secure Apps access) and the deadline is June 2020

Refer to
https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html 

We can expect other Cloud-Based email services to follow suite

 

MICROSOFT OFFICE365
=================

Following Microsoft announcement for October 2020, saying that they will
- turn off Basic Authentication in Exchange Online for Exchange ActiveSync (EAS), POP, IMAP
- only use Modern Authentication (OAuth 2.0 token based auth) for security concerns,
what will be the impact for EBS Workflow Mailer, since it is using IMAP?

 

Extracted from Microsoft website for an explanation of the change implemented for Office365, please refer to:
-----------------------------------------------------------------------------------------------------------------------------------------------
https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Improving-Security-Together/ba-p/805892
...
Last year we announced we are turning off Basic Authentication for Exchange Web Services on October 13, 2020.
Today, we are announcing we are also turning off Basic Authentication in Exchange Online for Exchange ActiveSync (EAS), POP, IMAP and Remote PowerShell at the same time – October 13, 2020.

-----------------------------------------------------------------------------------------------------------------------------------------------


   

 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.