Editing Thunderbird (section)

== Email ==
=== Setup with Rose-Hulman Exchange Email Server ===
Official instructions are found [https://servicedesk.rose-hulman.edu/knowledgebase/article/KA-01175/en-us on EIT's website].

This page is useful because it walks you through the process. You can apply a similar setup to any other IMAP email client (e.g. Evolution on Linux, K-9 Mail on Android, FairEmail on Android, etc.)

So here is what you need to do to connect:

# Go to File > New > Existing Mail Account... in Thunderbird.
# In "Your Name", enter your real name or Rose username. This will show up in the "To: " field when you have sent messages to other people.
# Under "Email address": enter "[yourrosehulmanusername]@rose-hulman.edu", replacing '''[yourrosehulmanusername]''' with your username used at Rose-Hulman (which contains your last name and first name and usually middle initial).
# Under "Password": enter your Rose-Hulman '''network''' password. This means whatever you log into Moodle, Banner Web, or My Rose-Hulman with, and applies generally to most Rose services.
# You can click on "Remember password" so you won't need to reenter your password. But be careful, because if you give someone physical access to your computer, they can see your Rose password! (It is stored in plain text in Thunderbird's database, see [https://support.mozilla.org/en-US/questions/1061706 here for a description of the problem] and [https://support.mozilla.org/en-US/kb/protect-your-thunderbird-passwords-master-password here for a solution which will require a separate password to fetch new mail from your email accounts in Thunderbird]. This is still present as of Firefox 52.x versions.)
# Now click "Continue". Immediately click "Manual config". Thunderbird will not be able to look up the mail server properly or enter the correct authentication settings so a manual configuration is required.
# Enter the following settings into each of the boxes. Important settings to note are bolded:

{| class="wikitable"
|+Manual config - Mail Account Setup
|-
| 
| 
|Server hostname
|Port
|SSL
|Authentication
|-
|'''Incoming:'''
|IMAP
|outlook.office365.com
|'''993'''
|'''SSL/TLS'''
|'''OAuth2'''
|-
|'''Outgoing:'''
|SMTP
|smtp.office365.com
|'''587'''
|'''STARTTLS'''
|'''OAuth2'''
|}

'''IMPORTANT:''' You have to select the OAuth2 setting under "Authentication". "Normal Password" will not work. This is because 2-Factor Authentication is required on Rose-Hulman accounts since April 26, 2021, and the only way to use 2-Factor Authentication is to go through the Microsoft sign-in page, which uses the OAuth2 technology.

'''Extra information''': As of April 24, 2021, app passwords cannot be added to your account, which would work with the "Normal Password" option.

8. Leave username (incoming/outgoing) the same. Now click '''"Done"''' (NOT Re-test, because that will auto-detect incorrect settings).

9. If another message dialog pops up for credentials, enter your Rose-Hulman network password and username (networkusername@rose-hulman.edu) into the box. You can allow Thunderbird to save the password like last time.

'''Troubleshooting''': If you clicked "Re-test" and not "Done" and then your settings don't work (e.g. Thunderbird then would try to switch to Kererbros instead of NTLM after checking settings, "The following settings were found by probing the given server" -- there is an error with Thunderbird's recognition of settings), you will need to reconfigure these fields because Thunderbird automatically tries multiple connection types. If you get "Thunderbird failed to find the settings for your email account" error, you will need to recheck what you entered in the fields/boxes, then click "Done" again to test the connection (NOT Re-test).

10. You will now see a dialog box pop up with the Rose-Hulman website. Log in with your network password and enter your 2-Factor Authentication code which you can access through KeePassXC (TOTP > Show Code) or your phone app. Click OK. If it prompts for permissions, click '''Accept (see why below*)'''. The window should now close.

'''*Why should I accept them''': The permissions are mandatory so Thunderbird can figure out your name when sending email, get your email, and send email. Those are the only permissions it lists anyway. Thunderbird will not access anything besides your email or real name. Unless you sync your settings with Mozilla Sync, this info will be stored locally. But even if you do use Mozilla Sync, it will encrypt your data, so Mozilla cannot read it. See their privacy policy for details.

11. Now you are all set up to read your email from Rose.

Source: https://kb.wisc.edu/helpdesk/page.php?id=102005