What changes for Canon devices
Microsoft's notice MC786329: “End of December 2026: SMTP AUTH Basic Authentication will be disabled by default for existing tenants.” It applies to any device that signs in to Microsoft 365 with a username and password, whatever the brand. Admins can still turn it back on for now. Microsoft will announce the final removal date in the second half of 2027.
What Canon says about Microsoft 365
Configure the settings to use Microsoft's cloud service, Microsoft Exchange Online, or Google's cloud service, Google Workspace, with the OAuth 2.0 authorization framework.
Canon, Using a Cloud Mail Server with OAuth 2.0 (read October 30, 2026)
- Devices
- “Our latest imageFORCE devices support the OAuth 2.0 protocol.” (Source)
- Firmware
- “Support for most older devices (Canon imageRUNNER ADVANCE Gen 3 and DX series) can be added through a firmware update that enables OAuth functionality.” (Source)
- “Support is completely unavailable on many devices that are more than 10 years old, as well as on some other models.” (Source)
Where the scan-to-email settings are
In Canon's instructions the device's browser settings page is called Remote UI (Source). Open it by typing the device's IP address into a browser on the same network, and sign in as the administrator.
Turning on OAuth, in Canon's words
- Configure this setting using Remote UI from a computer. (Source)
- You cannot use the control panel to configure the setting. (Source)
- On the Portal page of Remote UI, click [Settings/Registration]. (Source)
- Click [Send] [OAuth 2.0 (Microsoft) Settings]. (Source)
- Select the [Use OAuth 2.0 (Microsoft)] checkbox. (Source)
Whichever route you choose, you'll fill in the same handful of fields: the SMTP server, the port, the encryption, whether to sign in, and a username and password.
Your options on a Canon
1. OAuth, on models Canon lists
Microsoft recommends OAuth for devices that send through smtp.office365.com. The device keeps port 587 and TLS (TLS 1.2 or TLS 1.3) and signs in with Microsoft instead of a stored password. Follow Canon's steps on the page above.
2. CopierBridge, for devices that can't
Keep the device on a username and password. Turn on Authenticated SMTP for the mailbox it sends as (Microsoft's steps), connect that mailbox to CopierBridge once, add the device, and type these values into its scan-to-email settings:
- SMTP server
- smtp.copierbridge.com
- Port
- 587
- Encryption
- STARTTLS
- Authentication
- On (username and password)
- Username
- frontdesk-copier
- Password
- ••••••••••••••••
- From address
- scans@example.com
3. Microsoft's other routes
An SMTP relay connector (static IP, port 25), Direct Send or High Volume Email (both internal recipients only), or an on-premises Exchange relay. Each one is set out step by step in the full guide.
If scan to email stopped working
Read the message the Canon shows and look it up on Microsoft 365 SMTP errors, or work through scan to email not working.