Inbound email using MAPI

[Elisa Yanez]

I need to set up the inbound mail for Jira, but I am encountering issues as my security team does not want to allow a POP or IMAP account for this. They also informed me that Microsoft has announced it will no longer support the POP and IMAP email protocol by the end of 2020. How can I configure the inbound email that will continue working past 2020?

[Nic Brough -Adaptavist-]

At present, Atlassian do not seem to have plans to incorporate MAPI as it's proprietary.

You will need to get your Security team to understand that IMAP (over SSL) is perfectly secure and allow it.  If you can't do that, then you'll need to set up a proper mail server that supports IMAP and get your Exchange administrators to set up forwarding (or just bypass Exchange completely)

[Elisa Yanez]

Is there any other secure option Jira is planning to integrate for this?

I was looking into this article https://docs.microsoft.com/en-us/connectors/jira/

Will this handle email for Jira?

On the POP and IMAP integration over SSL is ok, the problem is that MS will stop supporting basic authentication in October 2020 (https://developer.microsoft.com/en-us/office/blogs/end-of-support-for-basic-authentication-access-to-exchange-online-apis-for-office-365-customers/)  What do we do then?

We are trying to find a solution that is long term.

Thank you

[Nic Brough -Adaptavist-]

Atlassian will be supporting Oauth2 for it

[Elisa Yanez]

Nic,

Thanks for your prompt answers. Do you know when that will be done and how will the configuration work? Will that be similar to what Jira Cloud is using?

Do you have any documentation? I need to present dates and documentation to my integration team to plan for the changes. 

[Nic Brough -Adaptavist-]

Given the MS deadline, it will be done before then, with at least a few weeks before to give admins time to adjust their settings.   But I can't begin to guess at dates.  

I would say it's likely to match Cloud (why re-invent yet another wheel).

But I have nothing to share, my info is all second-hand from random discussions with Atlassians.  They know MS is breaking stuff, they know they need to accommodate it, they know how to, but timetables and documents - nothing I've seen (but please bear in mind this is only a tiny facet of what I do, there could well be a wealth of docs, blogs and info out there that I've simply not seen)

[Elisa Yanez]

could you point me to someone who may have more information?