Implement Exchange Server Modern Authentication

Hi,

We would like to implement Hybrid Modern Authentication (HMA) for our On-premises Exchange server: This is Microsoft’s information article on this topic. Hybrid Modern Authentication for Exchange on-premises - Power Platform | Microsoft Learn

Apparently, HubSpot’s email integration for Exchange does *not* support modern authentication (OAuth2-based) when connecting to to Exchange. Implementing this is definitely possbile - HMA for Exchange Web Services is fully supported by MS.

Your documentation (Connect your personal email) suggests to use an “app password” if 2FA is enabled (same situation as with HMA - normal password won’t work), but this is not really an option, since Microsoft’s documentation clearly states that app passwords are *not* supported for Azure / MS 365 accounts anymore when using the recommended way of setting up MFA via Conditional Access Policies - see: Configure app passwords for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn

“App passwords don’t work with Conditional Access based multi-factor authentication policies and modern authentication.”

Password-based authentication is a major risk these days. We really want to properly secure our email infrastructure. As it is, HubSpot is the only 3rd party application currently stopping us from implementing HMA.

Best regards,

JW

Any update on this? Using HubSpot’s connected mailboxes is the only reason we can’t switch to modern authentication for our Exchange server, which means we are unable to secure our mailboxes, calendars, etc. with multi-factor authentication (MFA).