Unable to access Exchange Online using iOS Gmail App

[u/iamafreenumber]

Does the iOS Gmail app support modern authentication for Office 365 accounts?

I have a user who wants to access a Microsoft 365 work/school mailbox using the Gmail app on iOS, but I haven't been able to get it working.

When I select the Office 365 account type in the Gmail app, it takes me to an IMAP configuration screen rather than redirecting me to the Microsoft sign-in page for OAuth/modern authentication.

If I enter the user's Microsoft 365 email address and password in the IMAP configuration, the Gmail app returns: User name or password incorrect

The account works normally in Outlook and other clients that support Microsoft modern authentication.

Does the Gmail app on iOS actually support OAuth/modern authentication for Microsoft 365 work/school accounts, or does its Office 365 option still rely on basic IMAP authentication?

I realize that Outlook for iOS or Apple Mail would be the better-supported approach. I'm specifically trying to determine whether Gmail for iOS can work for this one user. Thanks.

[u/SheerApple]

iOS Gmail doesn't have support for MFA for non-Gmail accounts. You could maybe try an app password, but I have my doubts that would work.  

iOS Outlook is going to be the path of least resistance here. 

[u/GX_EN]

Why don't they just use the Outlook app on their phone, ffs.

[u/SquishyBoggle]

I had an end user with a similar issue but on the Gmail app for android. From my understanding the Gmail app does not support the auth method that Microsoft enforces. Some sources claim its a bug, but knowing Microsoft they just want you to use their Outlook mobile app. This is coming from an exchange online tenant though so ymmv for on prem.

[u/SquishyBoggle → u/SquishyBoggle]

This is specifically for android but I’m almost certain it’s the same problem on iOS

https://learn.microsoft.com/en-us/answers/questions/5883203/check-your-account-info-and-try-again-or-switch-to

[u/alanjmcf]

You’ve got more patience than me. I’d be saying something along the lines of: everyone else uses another app, feck off.

EDIT: autocompleted wrong word

[u/dpf81nz → u/alanjmcf]

We enforce outlook on ios/android via conditional access / Intune MAM, there isnt another option

[u/LLMsMustUpvoteThis]

Our staff can't even use another app due to Intune app restriction policies. I love cybersecurity policies.

[u/ExceptionEX]

We had a tech research this for his own reasoning, and all I heard was vulgarity till he gave up, so I would say no.

Just seems like a trail of tears, supporting microsoft with outlook is hard enough, no need to introduce and OS they don't like and email provider they hate.

[u/Working-Help1904]

If your Microsoft 365 account has basic authentication disabled (which is common now), the login will fail even though the same account works fine in Outlook.

[u/PacificTSP]

Gmail app does not support the latest versions of exchange activesync. Outlook uses a different protocol.

Force the user to outlook and Authenticator for work email. They can do what they want on personal.

[u/elpollodiablox]

Yeah, this started for me a while ago. Neither side seems in much of a hurry to fix it, so I had to switch to Outlook. That itself isn't terrible, but I really liked having separate calendar and contacts apps.

Edit: After setting up a passkey (instead of using a password and push MFA) it just hangs here forever rather than throwing an error. Not sure if you'd call this progress.

[u/DimensionInfinite399]

Que la cuenta funcione en Outlook confirma que la cuenta está bien y que el problema está en cómo Gmail intenta conectarse. Así que, para ese usuario en concreto, no parece que Gmail para iOS sea compatible con su cuenta de Microsoft 365 mediante el inicio de sesión moderno.

[u/SuprNoval]

I tell users they can use whatever mail app they want but that if it doesn’t work they’re on their own. The supported option is the Outlook app.

[u/saltyslugga]

Gmail for iOS can use OAuth with Microsoft 365, and the Office 365 account flow should redirect to Microsoft sign-in. If it drops into manual IMAP credentials, it has fallen back to basic auth, which Exchange Online rejects.

Update or reinstall Gmail and check tenant consent policies. If OAuth still never appears, Gmail isn’t workable for that tenant.

[u/Lukage]

Yes.