Office 365 (Thunderbird) - Configure Modern Authentication

This document describes how to configure modern, 2 factor authentication with new ThunderBird versions

Note: These instructions assume you are running a version of Thunderbird 77.0b1 or later which supports OAuth2 modern authentication.

Configure Thunderbird for Office 365

  1. Launch Thunderbird to bring up the main Thunderbird interface. If you have other accounts configured, you can navigate here by clicking on Local Folders on the lefthand side. Select Email under the Setup Another Account section in the main window.
  2. On the Mail Account Setup window, enter information into the available fields as follows:
    • Your name: Your name as you'd like it to appear
    • Email Address: -
      • NetID Account: Enter
      • Service Account: Enter\username_domain
        For multi-level domains,, use the following format:
        • Enter when using Thunderbird 78 as it will be flagged as invalid if there is a slash in the address.

      Important: do not enter in your password on this login screen. Only enter your email address and name.

      Note: if you don't know whether you are attempting to configuring a NetID account or a Service account, please contact your domain administrator or the DoIT HelpDesk.

    account setup screen
  3. Click Continue
  4. Thunderbird should automatically discover and fill in the server settings necessary for your account:
    • Protocol
    • Incoming
    • Outgoing
    • Username

    mail account setup screen
  5. Click Done to confirm the creation of your account.
    • Note: Now if you try to navigate to the Mailbox that was just added, you will be prompted to enter in your password. If this happens, hit cancel
    • You may be prompted to complete Two Factor Authentication at this time. Complete this now to continue.
  6. Navigate to Account Settings > Server Settings > Security Settings > Authentication Method and select OAuth2 from the Authentication Method dropdown.

    Reconfigure authentication - Server Settings

  7. Navigate to Outgoing Server on the left-hand panel of the account settings screen.
  8. Select the WiscMail smtp server and click edit on the righthand side
  9. Change the Authentication method to OAuth2  to the following and then click OK:
    • Description: WiscMail (
    • Server Name:
    • Port: 587 (default)
    • Connection Security: STARTTLS
    • Authentication Method: OAuth2
    • User Name:

    Outgoing Server Settings

  10. Now, when you attempt to view your inbox, instead of being prompted for your password by thunderbird, you will be redirected to authenticate through DUO.
  11. After authenticating in step 10, the setup is complete. Email data will take some time to sync. BE PATIENT.

Important: Please complete these steps before using your Thunderbird client.

Configure Access to the Campus Directory (Whitepages)

Remember: Thunderbird cannot access the Office 365 Global Address List (GAL). Therefore, you may still need access to the Campus Directory (Whitepages) to find the person you are searching for.

Use these instructions to configure the Campus Directory (Whitepages) within this client.