Office 365 (Thunderbird) - Configure Modern Authentication

These instructions are for version of Thunderbird 77.0b1 or later, which supports OAuth2 modern authentication. To see your current version, press ALT+H and ALT+A.

Configure Thunderbird for Office 365

  1. Launch Thunderbird to bring up the main Thunderbird interface.
  2. If you have other accounts configured, you can navigate here by clicking on Local Folders on the left-hand side. Select Email under the Setup Another Account section in the main window.
  3. On the Mail Account Setup window, enter information into the available fields as follows:
    • Your name: Your name as you'd like it to appear
    • Email Address:
      • NetID Account: Enter
      • Service Account: Enter\username_domain
        • For multi-level domains,, use the following format:
        • Enter when using Thunderbird 78 as it will be flagged as invalid if there is a slash in the address.
    • Important: do not enter in your password on this login screen. Only enter your email address and name.

    • Note: If you don't know whether you are attempting to configure a NetID account or a Service account, please contact your domain administrator or the DoIT Help Desk.

    account setup screen
  4. Click Continue
  5. Thunderbird should automatically discover and fill in the server settings necessary for your account:
    • Protocol
    • Incoming
    • Outgoing
    • Username
    mail account setup screen
  6. Click Done to confirm the creation of your account.
    • Note: Now if you try to navigate to the Mailbox that was just added, you will be prompted to enter in your password. If this happens, hit cancel
    • You may be prompted to complete Two Factor Authentication at this time. Complete this now to continue.
  7. Navigate to Account Settings > Server Settings > Security Settings > Authentication Method and select OAuth2 from the Authentication Method dropdown.

    Reconfigure authentication - Server Settings

  8. Navigate to Outgoing Server on the bottom of the left-hand panel of the account settings screen.
  9. Select the WiscMail smtp server and click edit on the righthand side
  10. Change the Authentication method to OAuth2  to the following and then click OK:
    • Description: WiscMail (
    • Server Name:
    • Port: 587 (default)
    • Connection Security: STARTTLS
    • Authentication Method: OAuth2
    • User Name:
    Outgoing Server Settings
  11. Now, when you attempt to view your inbox, instead of being prompted for your password by Thunderbird, you will be redirected to authenticate through Duo.
  12. After authenticating in step 10, the setup is complete. Email data will take some time to sync. BE PATIENT.

You can get to the configuration settings by:

  1. Click Tools on the top menu bar (or the key combination ALT+T)
  2. Click Account Settings

Important Additional Steps to Complete Before Using Thunderbird

  • Reconfigure folder mapping:

    Clients configured using Microsoft Exchange protocol use different folders for some of the primary mail folders. For consistency, we highly recommend that you configure Thunderbird to use these same folders. This will make it less confusing if you also use the web client for Office 365 or a different desktop client that is using the Exchange protocol.

    1. Right-click on your Office 365 account and select "Subscribe..." from the drop-down menu.

      Reconfigure Folder Mapping - select Subscribe menu option

    2. Place a check-mark within the box next to each of these folders: "Drafts | Deleted Items | Sent Items".
    3. Click Subscribe button.

      folder subscribe screen

    4. Click OK button.
    5. Right-click on your Office 365 account and select "Settings..." from the drop-down menu.

      account settings menu selection

    6. Under your Office 365 account, select "Server Settings".
    7. Within 'Server Settings | When I delete a message' section, select "Move it to this folder:" and use the text box next to this setting to select the "Deleted Items" folder.

      server settings options

    8. Under your Office 365 account, select "Copies & Folders".
    9. Within 'When sending messages, automatically | Place a copy in:' section, select "Other" and use the text box next to this setting to select the "Sent Items" folder within your Office 365 account.

      sending messages options

    10. Make sure "Drafts" folder is selected within your Office 365 account under 'Drafts and Templates'.

      drafts and template options

    11. Click the OK button.
    12. Restart Thunderbird
  • Disable the adaptive junk mail controls:

    Office 365 server side junk/spam filtering is already enabled for all Office 365 accounts.

    1. Right click on the email address you just configured in the left-hand pane.
    2. Click on Settings.
    3. Click Junk Settings from the left-hand option pane.
    4. Click Junk Settings

    5. Uncheck the box for Enable adaptive junk mail controls for this account.
    6. Disable Adaptive Junk Settings

    7. Click the OK button.

Configure Access to the Campus Directory (Whitepages)

See Also:

Keywords:Modern Authentication thunderbird beta office 365 smtp folders server junk mail sent items deleted configure OAuth2 2 factor Authentication 2FA Whitepages campus directory   Doc ID:102005
Owner:Help Desk KB Team .Group:DoIT Help Desk
Created:2020-05-12 11:15 CSTUpdated:2021-11-04 14:21 CST
Sites:DoIT Help Desk, Office 365
Feedback:  110   60