EBS Workflow Mailer Configuration with OAuth 2.0 Token-Based Authentication for Cloud-Based Email Services (Gmail, Yahoo, Office365, etc) (Doc ID 2650084.1)

Last updated on NOVEMBER 19, 2023

Applies to:

Goal

Is there any solution provided in order to take into account the OAuth 2.0 token-based authentication for EBS Workflow Mailer ?

Configuring an Oracle Workflow Notification Mailer with Cloud E-Mail Servers (Doc ID 2077434.1)  --- uses Basic Authentication and not OAuth 2.0 token-based authentication
    Section 3: Configuring Outbound Notification Mailer Processing
      1.  Navigate to the Basic Configuration Page within the Oracle Workflow Manager component of Oracle Applications Manager ...

• Username: Specify the user name of the account that the notification mailer uses to connect to the SMTP server.
• Password: Specify the password for the outbound user account that the notification mailer uses to connect to the SMTP server.

>> user/pwd as instructed above is using the Basic Authentication protocol configuration which will not connect any longer with either Gmail, Yahoo or Office365 when the new OAuth2.0 token-based authentication protocol get into effect

For example, the following documents mention setting up Cloud-Based Email services but are instructing either, to use Basic Authentication (username/password) setups, or not mentioning the authentication requirements at all, hence assuming to use the Basic Authentication:
  -  Is Multi Factor Authentication (MFA) Supported to Work with Java Mailer ? (Doc ID 2318926.1)
  -  R12 E-Business Suite Configuring Workflow Mailer with TLS for Microsoft Office365, Gmail, or Cloud-Based Email Services for 12.1.3 and 12.2 (Doc ID 2051827.1)
  -  Workflow Notification Mailer Not Authenticating with SMTP Servers Requiring TLS Before Login (Doc ID 1903575.1) 
etc.

GMAIL/YAHOO  - and Other generic Cloud-Based Email Services
==========

Google has recently announced that they will be only allowing connections using OAuth (as opposed to username/password, which they call Less Secure Apps access) and the deadline was June 2020
However this was suspended in October 2020 with the information Google will let know at least a year in advance when they decide to move ahead and remove LSA access

Refer to
https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html
and
https://workspaceupdates.googleblog.com/2020/03/less-secure-app-turn-off-suspended.html

We can expect other Cloud-Based email services to follow suite

MICROSOFT OFFICE365/EXCHANGE ONLINE
==============================

Effective October 1, 2022, Microsoft will begin to permanently disable basic authentication in all tenants
This change is expected to impact EBS customers using Microsoft's Office 365 Exchange Online as the mail server for the EBS Workflow Notification mailer.
Considering Microsoft will:
- turn off Basic Authentication in Exchange Online for Exchange ActiveSync (EAS), POP, IMAP
- only use Modern Authentication (OAuth 2.0 token based auth) for security concerns,
what will be the impact for EBS Workflow Mailer, since it is using IMAP?

Extracted from Microsoft website for an explanation of the change implemented for Office365/Exchange Online, please refer to:
-----------------------------------------------------------------------------------------------------------------------------------------------
https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.