It has been tested with certifications for a record with MFA, application secret phrases for a record with MFA, qualifications without MFA, and 'Less secure application access' enabled (be careful about different devices). On ports 465 and 587, I've attempted everything above, but get the same error message on 'Test association'.