How to connect programmatically via EWS when MFA is Enforced?

New Contributor



How can we connect to a mailbox programmatically via EWS when MFA is Enforced?  We've tried creating an App Password but still get 401 Unauthorized when trying to connect.


How does Microsoft provide for this case, i.e. when MFA is required to be Enforced and at the same time we must connect to a mailbox programmatically?  I guess I'm missing something in the Tenant configuration.


Thank you!

Bob H.

1 Reply
best response confirmed by bobhe875 (New Contributor)

Obtain a token in app context and impersonate the user. There's detailed guidance here: