Setup guides

Find which devices still use SMTP AUTH basic auth

Exchange Online keeps a report of every account that sent mail with SMTP AUTH, and which authentication it used.

1. Open the Exchange admin center and go to Reports, Mail flow, SMTP AUTH clients.
2. Look at the Authentication Protocol column: "Basic Auth" means the sender logs in with a password and will break; "Modern Auth" means it already uses OAuth.
3. Widen the date range (the default is 7 days, up to 90) to catch devices that send rarely, such as month-end reports or UPS alerts.
4. Export to CSV and note where each sender physically lives: the copier on the second floor, the accounting script, the website form.

The report also shows which TLS versions each sender used. Senders still on TLS 1.0 or 1.1 are usually old devices that will not get OAuth firmware; SMTPKeep accepts them on port 2525.

For each sender that will not move to OAuth, create an SMTPKeep device with the same mailbox and point the device at smtp.smtpkeep.com.