Important Update to The Buzz on Dynamics GP Email Functionality & TLS!

This post has been revised as of 9/23/22 to provide the most current information. 

In January of 2022 Microsoft announced effective October 1, 2022, they will be permanently disabling Basic Authentication in all tenants regardless of usage.  Basic Authentication is a legacy authentication protocol that exposes users to a multitude of security risks such as phishing emails, compromised files, ransomware attacks, etc…

Basic Authentication protocols will be replaced with a new modern protocol to secure Exchange Online and hosted Office 365 from possible cyber-attacks. Consequently, these security changes will disrupt email and workflow functionality in older versions of Dynamics GP.

Modern Authentication uses TLS (Transport Layer Security) 1.2 which provides an extra layer of protection of the organization’s security by employing modern encryption keys.  It also supports multi-factor authentication (MFA).

Exchange and Office 365 are mandating TLS 1.2 across all Microsoft applications.  ANY program using TLS 1.0 and 1.1 will be affected.

What does this mean to you?

If you are not using Modern Authentication after Oct. 1, 2022, users will begin receiving ‘Login Failed’ messages when they enter their Exchange credentials to authenticate when attempting to email or use email setup in the Dynamics GP application. Once this occurs, there is no other work-around or fix that will be provided by Microsoft. This excludes organizations using Exchange on-prem.  See link below for information from Microsoft:

(+) Basic authentication is being deprecated, is your Microsoft Dynamics GP Exchange email ready? – Microsoft Dynamics GP Community

After October 1, 2022, Dynamics GP Versions 18.2 and older will be unable to connect with the Exchange server and prevent emails containing orders, invoices, statements, purchase orders, and remittances from being sent to customer or vendors.

Note: If you are on an older version of GP and do not use email or workflow functionality, then this change will not impact you.  Dynamics GP 18.3 and higher will not be affected by this change as Modern Authentication is already active in GP 18.3 or later.

 When emailing documents from GP, you need to authenticate as a user to connect to Exchange. Because Exchange will now only recognize the Modern Authentication email, older versions of GP will be unable to communicate with the Exchange server, and emails with sales and purchasing documents attached will not be sent.  If your GP Workflow is setup to use email, this functionality will also stop working as email is used to move through the steps designated in the Workflow setup.

 What are your options to avoid disruptions to the email functionality in Dynamics GP?

• Option 1: Upgrade to the latest version of Dynamics GP by October 1, 2022.
• Option 2: Purchase RSM’s APP Dev Product – $2500 for the tool and one SSRS report. RSM has developed a .net windows application to leverage the email settings within Dynamics GP and SSRS to print/email customer, employee and vendor facing documents.  It allows clients to print by various filter options with no limitation on batch size.  The performance of the application is about 100-200 documents in 3-5 minutes (depending on size of SSRS report and server performance).  It leverages the Outlook application installed on workstation/server and logged in Mail Profile.
• Option 3: Purchase Forms Printer Product
  • Forms Printer using Outlook for Emailing will not be effected by the MFA Authentication because Outlook will handle the TLS Communication and MFA Authentication. GP’s Emailing does not use Outlook.
  • Newer builds of Forms Printer for GP2018 and 18.x, have the additional option to use EWS (Exchange Web Services) emailing instead of Outlook. Forms Printer users who use EWS for Emailing will be affected and Forms Printer will have to be specially configured for MFA and TLS 1.2.

• Option 4: Purchase Liaison Messenger Product
  • Sends emails directly to Office 365
  • TLS 1.2 support
  • Works with GP versions 2015 and above.
  • Set up time required & requires a stand-alone workstation to run the print driver
  • Sends standard print jobs and emails
  • Cost based on user count licensing plus maintenance fees

Other products affected

To date, we know of four other products commonly used with Dynamics GP that are also impacted. If you are using any of these products you should reach out to their helpdesk or your product representative (Avalara, Salespad, KwikTag, Reqlogic, Mekorma).

What are next steps?

• We advise you to review the Microsoft email troubleshooting site as it has the most up to date details.

https://learn.microsoft.com/en-us/dynamics-gp/installation/email-troubleshooting-guide

• If you’re already scheduled for a GP Upgrade between now and year end, we recommend you keep your scheduled dates.
• If you’re currently in discussions with your RSM representative about upgrading or have already received a SOW, please continue working with them to schedule your upgrade.
• If you choose to take advantage of one of the alternative product options mentioned in this post, please reach out to your RSM representative to begin discussions about upgrading your GP as soon as possible.

Who should I contact with questions or assistance?

Reach out to your RSM Client Account Manager, your IT provider, or contact us here. You can also reach us by phone at 800.274.3978.

Patty Taylor