Office 365 (Thunderbird) - Configure Modern Authentication

This document describes how to configure modern, 2 factor authentication with new ThunderBird versions

Note: These instructions assume you are running a version of Thunderbird 77.0b1 or later which supports OAuth2 modern authentication.

Configure Thunderbird for Office 365

  1. Launch Thunderbird to bring up the main Thunderbird interface. If you have other accounts configured, you can navigate here by clicking on Local Folders on the lefthand side. Select Email under the Setup Another Account section in the main window.
  2. On the Mail Account Setup window, enter information into the available fields as follows:
    • Your name: Your name as you'd like it to appear
    • Email Address: -
      • NetID Account: Enter
      • Service Account: Enter\username_domain
        For multi-level domains,, use the following format:
        • Enter when using Thunderbird 78 as it will be flagged as invalid if there is a slash in the address.

      Important: do not enter in your password on this login screen. Only enter your email address and name.

      Note: if you don't know whether you are attempting to configuring a NetID account or a Service account, please contact your domain administrator or the DoIT HelpDesk.

    account setup screen
  3. Click Continue
  4. Thunderbird should automatically discover and fill in the server settings necessary for your account:
    • Protocol
    • Incoming
    • Outgoing
    • Username

    mail account setup screen
  5. Click Done to confirm the creation of your account.
    • Note: Now if you try to navigate to the Mailbox that was just added, you will be prompted to enter in your password. If this happens, hit cancel
    • You may be prompted to complete Two Factor Authentication at this time. Complete this now to continue.
  6. Navigate to Account Settings > Server Settings > Security Settings > Authentication Method and select OAuth2 from the Authentication Method dropdown.

    Reconfigure authentication - Server Settings

  7. Navigate to Outgoing Server on the left-hand panel of the account settings screen.
  8. Select the WiscMail smtp server and click edit on the righthand side
  9. Change the Authentication method to OAuth2  to the following and then click OK:
    • Description: WiscMail (
    • Server Name:
    • Port: 587 (default)
    • Connection Security: STARTTLS
    • Authentication Method: OAuth2
    • User Name:

    Outgoing Server Settings

  10. Now, when you attempt to view your inbox, instead of being prompted for your password by thunderbird, you will be redirected to authenticate through DUO.
  11. After authenticating in step 10, the setup is complete. Email data will take some time to sync. BE PATIENT.

Important: Please complete these steps before using your Thunderbird client.

  • Reconfigure folder mapping:

    Clients configured using Microsoft Exchange protocol use different folders for some of the primary mail folders. For consistency, we highly recommend that you configure Thunderbird to use these same folders. This will make it less confusing if you also use the web client for Office 365 or a different desktop client that is using the Exchange protocol.

    1. Right-click on your Office 365 account and select "Subscribe..." from the drop-down menu.

      Reconfigure Folder Mapping - select Subscribe menu option

    2. Place a check-mark within the box next to each of these folders: "Drafts | Deleted Items | Sent Items".
    3. Click Subscribe button.

      folder subscribe screen

    4. Click OK button.
    5. Right-click on your Office 365 account and select "Settings..." from the drop-down menu.

      account settings menu selection

    6. Under your Office 365 account, select "Server Settings".
    7. Within 'Server Settings | When I delete a message' section, select "Move it to this folder:" and use the text box next to this setting to select the "Deleted Items" folder.

      server settings options

    8. Under your Office 365 account, select "Copies & Folders".
    9. Within 'When sending messages, automatically | Place a copy in:' section, select "Other" and use the text box next to this setting to select the "Sent Items" folder within your Office 365 account.

      sending messages options

    10. Make sure "Drafts" folder is selected within your Office 365 account under 'Drafts and Templates'.

      drafts and template options

    11. Click the OK button.
    12. Restart Thunderbird

  • Disable the adaptive junk mail controls:

    Office 365 server side junk/spam filtering is already enabled for all Office 365 accounts.

    1. Right click on the email address you just configured in the left-hand pane.
    2. Click on Settings.
    3. Click Junk Settings from the left-hand option pane.
    4. Click Junk Settings

    5. Uncheck the box for Enable adaptive junk mail controls for this account.
    6. Disable Adaptive Junk Settings

    7. Click the OK button.

Configure Access to the Campus Directory (Whitepages)

Remember: Thunderbird cannot access the Office 365 Global Address List (GAL). Therefore, you may still need access to the Campus Directory (Whitepages) to find the person you are searching for.

Use these instructions to configure the Campus Directory (Whitepages) within this client.

Keywords:Modern Authentication thunderbird beta office 365 smtp folders server junk mail sent items deleted configure OAuth2 2 factor Authentication 2FA Whitepages campus directory   Doc ID:102005
Owner:Nickolas F.Group:DoIT Help Desk
Created:2020-05-12 12:15 CDTUpdated:2021-09-27 16:47 CDT
Sites:DoIT Help Desk
Feedback:  97   56