Scheduled Service Change: Zoom: Enforcing OAuth 2.0 for Office 365 Calendar Integration 09/25/2022
Event:
2022-09-25 12:00:00
Expected Duration:
2022-09-25 13:00:00
Status:
Closed
Brief Description:
On Sunday, September 25, 2022, Cornell will begin requiring that all Zoom account integrations with Office 365 calendars use the more secure OAuth 2.0 standard. This change is being made in anticipation of Microsoft’s upcoming deprecation of Basic Auth.
User Impact:
Zoom advises that users with Basic Authentication will be prompted to update to OAuth 2.0 with this requirement enforced.
Services Affected:
Web and Video Conferencing
Subsites Affected:
Zoom
Full Description:
On Sunday, September 25, 2022, Cornell will begin requiring that all Zoom account integrations with Office 365 calendars use the more secure OAuth 2.0 standard. This change is being made in anticipation of Microsoft’s upcoming deprecation of Basic Authentication (“Basic Auth”) on all Office 365 accounts.
Basic Auth was a simpler method of connecting to email and was significantly more vulnerable to malicious attacks on Cornell NetIDs and passwords. Microsoft is phasing out Basic Auth on October 1, 2022, to significantly improve the security of all email systems and accounts.
Please note that this change specifically affects the Calendar and Contacts Integration in a user’s Zoom profile. This integration, when enabled, allows a user’s Zoom desktop client to display meetings and contacts from their Outlook calendar. The upcoming change will *not* affect the Microsoft add-in for Zoom, which users may have installed in Outlook to allow them to easily add Zoom meetings while scheduling Outlook calendar events.
For more information, including how a user can check if their integration is using OAuth 2.0, visit the Cornell IT News article: Zoom Calendar and Contacts Integration Will No Longer Support Basic Authentication Starting September 25, 2022.
References:
For further details on using the Zoom calendar and contacts integration feature, visit How to use the calendar integration, or How to update the Office 365 integration settings for the Zoom client on the Zoom website. IMPORTANT: Whenever Zoom documentation asks a user to log into the Zoom web portal, the Cornell Zoom website, https://cornell.zoom.us, must be used.
For details on the phase-out of Basic Authentication by Microsoft, visit Basic Authentication Deprecation in Exchange Online.
Basic Auth was a simpler method of connecting to email and was significantly more vulnerable to malicious attacks on Cornell NetIDs and passwords. Microsoft is phasing out Basic Auth on October 1, 2022, to significantly improve the security of all email systems and accounts.
Please note that this change specifically affects the Calendar and Contacts Integration in a user’s Zoom profile. This integration, when enabled, allows a user’s Zoom desktop client to display meetings and contacts from their Outlook calendar. The upcoming change will *not* affect the Microsoft add-in for Zoom, which users may have installed in Outlook to allow them to easily add Zoom meetings while scheduling Outlook calendar events.
For more information, including how a user can check if their integration is using OAuth 2.0, visit the Cornell IT News article: Zoom Calendar and Contacts Integration Will No Longer Support Basic Authentication Starting September 25, 2022
References:
For further details on using the Zoom calendar and contacts integration feature, visit How to use the calendar integration
For details on the phase-out of Basic Authentication by Microsoft, visit Basic Authentication Deprecation in Exchange Online
CIT TDX ID:
807157
Timeline of Changes
| Description | Current Status | Date | Time |
|---|---|---|---|
| On Sunday, September 25, 2022, Cornell will begin requiring that all Zoom account integrations with Office 365 calendars use the more secure OAuth 2.0 standard. This change is being made in anticipation of Microsoft’s upcoming deprecation of Basic Authentication (“Basic Auth”) on all Office 365 accounts.
Basic Auth was a simpler method of connecting to email and was significantly more vulnerable to malicious attacks on Cornell NetIDs and passwords. Microsoft is phasing out Basic Auth on October 1, 2022, to significantly improve the security of all email systems and accounts.
Please note that this change specifically affects the Calendar and Contacts Integration in a user’s Zoom profile. This integration, when enabled, allows a user’s Zoom desktop client to display meetings and contacts from their Outlook calendar. The upcoming change will *not* affect the Microsoft add-in for Zoom, which users may have installed in Outlook to allow them to easily add Zoom meetings while scheduling Outlook calendar events.
For more information, including how a user can check if their integration is using OAuth 2.0, visit the Cornell IT News article: Zoom Calendar and Contacts Integration Will No Longer Support Basic Authentication Starting September 25, 2022 |
2022-09-22 | 16:08:36 |