Hero Banner

Secure Application Model

Learn and ask questions on how to implement secure application model

Reply
Visitor 1

Can 365 CSP Partners continue to use 365 email accounts for popular ticket systems e.g. Connectwise, ServiceNow, etc

Hello, we were wondering if Microsoft has some helpful documentation for developers for popular ticketing systems such as Connectwise and ServiceNow to prepare for Microsoft's new compliance requirements.

 

Many ticketing systems use IMAP/POP3 service which is a problem because we understand that Microsoft is going to require that all CSP email accounts have MFA which is not compatible with the legacy IMAP/POP3 technologies.

 

One suggestion: is it possible that a CSP sets up MFA for their CSP accounts, but creates a "tenant" account (which is except from the CSP MFA requirement since CSP tenants are except) for the purpose of using that "tenant" account for connector use in a ticket system?  E.G. If MyCompany.com is a CSP partner, could we create a MyCompany.com "tenant" account or would that cause an issue?

1 REPLY 1
Highlighted
Level 2 Contributor

Re: Can 365 CSP Partners continue to use 365 email accounts for popular ticket systems e.g. Connectwise, ServiceNow, etc

Jason - 

 

ConnectWise updated their advice to partners yesterday:

https://docs.connectwise.com/ConnectWise_Documentation/ConnectWise_Unified_Product/Supportability_Statements_for_ConnectWise_Unified_Product/Microsoft_Partner_Security_Requirements_and_Impact_to_ConnectWise_Products_FAQ

 

In short, they are recommending App Passwords for use with IMAP for email connector, and with the EWS connection used for Calendar Sync.  In this thread @JanoschUlmer confirms that this solution meets the requirements (at least for now):  https://www.microsoftpartnercommunity.com/t5/Multi-Factor-Authentication-MFA/Legacy-Protocol/m-p/12072#M398

 

So if you are using the same tenant for ConnectWise and CSP this should work.