Scan-to-email guides for Microsoft 365

At the end of December 2026, Microsoft 365 turns off Basic authentication for SMTP AUTH by default. These guides explain what that means for scan-to-email, how each copier brand handles OAuth, and when a relay makes sense.

Start here

Scan to email after Microsoft 365 SMTP Basic auth is turned offAll five options compared: OAuth firmware, relay, SMTP2GO-style senders, HVE, direct send Reject Direct Send without breaking scanners550 5.7.68, the CIS control, and three ways to keep devices sending Fujifilm Apeos and ApeosPortCheck for OAuth support, or point the device at a relay EWS retirement checklist for MSPsWhich scan workflows use Exchange Web Services, a per-tenant checklist, and the SMTP AUTH deadline Scan-to-email cutover checklist for MSPsInventory, a fix per device, relay rollout and a test table for each site Find devices still using SMTP AUTH BasicAudit checklist: reports, sign-in logs and PowerShell, then a fix per device Websites, ERP and business apps after Basic auth is offContact forms, invoices from accounting/ERP, CRM and in-house code: OAuth, Graph or a relay NAS, UPS and appliance alerts after Basic auth is offQNAP, Synology, UPS cards and firewalls: what to check, and options for devices with no OAuth Send-MailMessage and scripts after Basic auth is offPowerShell and Python alert scripts: Graph examples, permissions, and a relay for apps you can't edit 550 5.7.30 Basic authentication is not supportedThe error devices get once Basic auth is off (end of Dec 2026), and the fix per sender 535 5.7.139 Authentication unsuccessfulSMTP AUTH is disabled for the tenant: what it means and how to fix it RicohWeb Image Monitor, OAuth firmware, relay setup CanonRemote UI, OAuth 2.0 (Microsoft) settings, relay setup Konica Minoltabizhub Web Connection, OAuth groups, relay setup SharpSMTP tab, Get Token, relay setup Toshiba e-STUDIOOAuth model list, Cloud Authentication, relay setup XeroxAltaLink, VersaLink, B/C series: firmware and EWS paths Epson scan to email with Office 365OAuth2 in Web Config, what to check first, or a local relay Lexmark scan to email with Office 365OAuth 2.0 in the Embedded Web Server, or a local relay KyoceraCommand Center RX, OAuth models, connector utility HPEnterprise vs LaserJet Pro, EWS, relay setup BrotherWeb Based Management, OAuth support statement

Each brand guide links the vendor's own OAuth support list and manuals. Where we couldn't verify a menu path for a model family, the guide says so.

Keep older scanners sending, without a third-party mail service

ScanRelay takes plain SMTP from devices on your LAN and sends it as your own mailbox through Microsoft Graph with OAuth. It's open source and self-hostable. The hosted relay and MSP dashboard are in beta from October 2026.

Join the betaView on GitHub

Sources

  1. Microsoft Exchange Team: Updated Exchange Online SMTP AUTH Basic Authentication deprecation timeline (Jan 27, 2026)
  2. ScanRelay on GitHub