# Configure Microsoft 365 OAuth for an Apple Exchange Profile

## Configure Exchange Online with OAuth

Use the FileWave Exchange profile to configure an Exchange Online account on managed Apple devices with OAuth. Microsoft disabled Basic authentication for Exchange Online, so current Microsoft 365 deployments must use Modern Authentication.

You need:

- FileWave Central with permission to create and deploy profiles
- Microsoft Entra administrative access and the tenant ID for the Microsoft 365 organization
- User or email inventory values when the profile will populate account fields with FileWave variables

## User and email variables

The Exchange profile can populate the account user and email address with `%username%` or `%email%`. Confirm those inventory values for a test user before deploying the profile. See [Using variables in iOS/macOS Profiles](https://kb.filewave.com/books/profiles-apple/page/using-parameters-in-apple-iosmacos-profiles "Using variables in Apple iOS/macOS Profiles") for other supported profile variables.

## How

In FileWave Central, create a profile with **Filesets > Create New Desktop > Profile**, then add the Exchange payload.

1. Choose the Exchange Payload and then configure the following: 
    1. Account Name - Name of your choice
    2. Connection Type - Choose iOS or macOS
    3. User - You may use the variable for the username or for email to populate in the user’s account; %username% or %email%
    4. Email Address - You may use the variable for email to populate in the email address; %email%
    5. Check the box ‘Use OAuth for authentication’ to enable OAuth method
    6. OAuth Sign in URL - `https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize`
    7. OAuth Token Request URL - `https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token`
    8. Exchange ActiveSync Host - `outlook.office365.com`
    9. Optional settings - you may check based on your desired settings for the mail account

The screenshots show the Exchange payload fields and the correct `/oauth2/v2.0/authorize` and `/oauth2/v2.0/token` paths.

![XTIsQCU5Ltewu1mj-embedded-image-hvwxr1vc.png](https://kb.filewave.com/uploads/images/gallery/2023-07/XTIsQCU5Ltewu1mj-embedded-image-hvwxr1vc.png)

![7ProIZtUuE6UCedY-embedded-image-sdvrrkss.png](https://kb.filewave.com/uploads/images/gallery/2023-07/7ProIZtUuE6UCedY-embedded-image-sdvrrkss.png)

## Related Content

- [Deprecation of Basic authentication in Exchange Online | Microsoft Learn](https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online)
- Be sure to review Microsoft Office documentation on setting up [Exchange Online | Microsoft Learn](https://learn.microsoft.com/en-us/exchange/exchange-online)