Sage 100

 View Only
  • 1.  Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-17-2019 11:50

    A customer forwarded an email from Google about some pending changes, and is asking me about whether Sage 100 is compatible.

    We're constantly working to improve the security of your organization's Google accounts. As part of this effort, and in consideration of the current threat landscape, we'll be turning off access to less secure apps (LSA) - non-Google apps that can access your Google account with only a username and password, without requiring any additional verification steps. Access through only a username and password makes your account more vulnerable to hijacking attempts. Moving forward, only apps that support a more modern and secure access method called OAuth will be able to access your G Suite account.

    Access to LSAs will be turned off in two stages:

    1. June 15, 2020 - Users who try to connect to an LSA for the first time will no longer be able to do so. This includes third-party apps that allow password-only access to Google calendars, contacts, and email via protocols such as CalDAV, CardDAV and IMAP. Users who have connected to LSAs prior to this date will be able to continue using them until usage of all LSAs is turned off.
    2. February 15, 2021 - Access to LSAs will be turned off for all G Suite accounts.

    Question posted to Sage City... added here FYI in case anyone else is asked the same question and you want to nudge Sage in the same thread:
    Link.



    ------------------------------
    Kevin Moyes
    Technical Systems Analyst
    Munjal White Consulting Co.
    Toronto ON
    ------------------------------


  • 2.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-17-2019 15:10
    I don't think so. At least on the Alerts & Workflow test I tried, I had to specifically enable LSA. I never got it to work because Google kept disabling the account which SAW brushed off as Google being picky.

    The sign on for Sage Paperless Email seems equally insecure but I have never set up a customer to use Gmail as most refuse due to security/privacy concerns.

    ------------------------------
    Wayne Schulz - Schulz Consulting - 860-516-8990
    ------------------------------



  • 3.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-17-2019 16:10
    I'm pretty sure it is not compatible now, but John @ Sage is researching.  I'm not holding my breath, but perhaps they can fit it into v2020. 
    (Doesn't seem like it would be a ton of work and supporting a GMail standard would be a good thing for Sage to do... a small enhancement avoids a ton of grief later).

    ------------------------------
    Kevin Moyes
    Technical Systems Analyst
    Munjal White Consulting Co.
    Toronto ON
    ------------------------------



  • 4.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-17-2019 18:41
    Which John at Sage?

    ------------------------------
    Moira Goggin
    Executive Director
    90 Minds, Inc.
    ------------------------------



  • 5.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-18-2019 00:52
    Another question regarding for those who have more experience historically with Sage releasing these kinds of changes.
    Any hope that Sage would release oAuth support on previous versions Sage via a patch/fix or a PU?

    My concern is we might end up being cornered to have to upgrade a ton of clients at once because they're not on the latest version and would then be unable to email out. (We do have a workaround, but prefer not to use it)

    Thoughts?

    ------------------------------
    George Khairallah
    CTO | gotomyerp, LLC
    george.k@gotomyerp.com | 877-888-5525
    http://gotomyerp.com/
    ------------------------------



  • 6.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-18-2019 06:31
    Sage supports a fairly slim number of versions. I think whether they issue a fix to a supported version will depend largely on how easy it is to retrofit. That’s their pattern IMO.

    ---------------------------------
    Wayne Schulz - Schulz Consulting - 860-516-8990
    ---------------------------------





  • 7.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 12-18-2019 09:18
    John Nichols (see link in top post).

    ------------------------------
    Kevin Moyes
    Technical Systems Analyst
    Munjal White Consulting Co.
    Toronto ON
    ------------------------------



  • 8.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 01-30-2020 18:22
    On the roadmap for 2020 PU1 and 2019 PU4 (...so, summer at the earliest).
    Link.

    ------------------------------
    Kevin Moyes
    Technical Systems Analyst
    Munjal White Consulting Co.
    Toronto ON
    ------------------------------



  • 9.  RE: Using GMail and pending changes to SMTP authentication (requiring OAuth)

    Posted 04-17-2020 10:08
    On March 30, 2020 Google suspended this LSA policy until further notice https://gsuiteupdates.googleblog.com/2020/03/less-secure-app-turn-off-suspended.html

    ------------------------------
    Wayne Schulz - Schulz Consulting - 860-516-8990
    ------------------------------