3

Google have announced they are turning off access to G Suite via username/password authentication.

My initial concern was this could potentially impact anyone using G Suite for Outbound Mail. However the statement says "No change is required for scanners or other devices using simple mail transfer protocol (SMTP) or LSAs (less secure apps) to send emails."

My question is whether CiviCRM are considering OAuth2 authentication (eg Google's XOAUTH2 scheme) when sending mail?

0

CiviCRM is not responsible for authentication of users (that's the CMS, ie. Drupal or WordPress). Using OAuth2 (or other protocol) for authenticating CiviCRM to another system would be the responsibility of the extension that wants to do that.

Or do you see a reason to include Oauth2 in core CiviCRM?

I'd be hesitant about using Oauth2 before fully understanding what you're getting into - here's a helpful blog w/ links from Colan Schwartz:

https://colan.consulting/blog/authenticating-drupal-users-oauth2

| improve this answer | |
  • 1
    True, but I think that what the poster is asking about is for civi administer - system settings - outbound mail if you choose smtp and are using gmail servers as your outbound mail server. In that case civi does authenticate to google. – Demerit Dec 20 '19 at 16:32
  • Yes, you're probably right. I'd still say that it would require an extension and including it in CiviCRM Core would not be smart (for reasons of security/maintenance). – Alan Dixon Dec 20 '19 at 17:26
  • Fair enough. I think also the auth might be currently handled by the 3rd party EZC/zetacomponents package which might not support it anyway. – Demerit Dec 20 '19 at 17:30
  • Speaking on behalf of myself (we run a trade organization in the US) and a handful of others whom use CiviCRM and we talk back and forth, we all use Google Suite (former Google Business Apps). There are about 5M +/- paying businesses whom use it currently. Not sure how that breaks down to CiviCRM, but it certainly is not fly-by-night. To that point, the outgoing mail would become an issue for us and we wouldn't change email providers in order to keep CiviCRM. Not being negative, just we are not coders and retraining email ops to keep Civi wouldn't happen here. – D. Paul Williams Dec 20 '19 at 17:41
  • 2
    My reading of the quote is that the target dates are for INBOUND reading of emails through POP/IMAP clients etc and they have not set a specific date for requiring anything new regarding OUTBOUND emails, just that they are hinting someday they might. While POP/IMAP might be used by the email processor, so it would affect that, OUTBOUND is the bigger concern for most civi users but that isn't set to change yet. Anyway I've made a ticket at lab.civicrm.org/dev/mail/issues/59. Thanks @ken-west for reporting. EDIT: Forgot about bounce processing. This could matter for inbound too then. – Demerit Dec 20 '19 at 18:30
0

On further reflection, I'm more comfortable with Google's comment that the ability to send email will continue.

If there does turn out to be an issue, those of us using Google's G Suite SMTP relay service will have the option of turning off "Require SMTP Authentication" provided we "Only accept mail from the specified IP addresses".

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.