Google@UH Less Secure Apps (LSA) End of Life

UH ITS will be disabling Less Secure Apps for Google@UH users on June 4th, 2024. Users who use a third-party email client (such as Thunderbird, Outlook, and iOS or macOS Mail) or calendar application to check their email or sync calendars/contacts may be impacted. Access to Google@UH Gmail, Calendar, and Contacts on the web will not be impacted.

What is Less Secure Apps (LSA)?

Less Secure Apps (LSA) is a sign-in method used to authenticate your Google@UH account to third-party applications, such as email clients. Users authenticating with LSA sign in to applications using only their UH Username and password. LSA is an outdated authentication method that puts accounts at additional risk since it requires sharing account credentials with third-party applications and can make it easier for malicious actors to gain access to a user’s account. The industry has adopted a more secure method of authenticating third-party applications called OAuth 2.0 - this method is supported by most modern email clients.

Who is Impacted?

Users who use a third-party email client (such as Thunderbird, Outlook, and iOS or macOS Mail) or calendar application to check their email or sync calendars/contacts may be impacted if their application(s) connect via LSA. Impacted users will need to remediate their affected third-party applications prior to LSA being disabled on June 4, 2024 if they wish to continue using them to connect to their Google@UH account.

1. Check if you are currently using LSAs.

A.  To check if you have currently enabled Less Secure Apps, visit https://myaccount.google.com/lesssecureapps and log in with your Google@UH account. If this setting is either OFF or listed as "not available for accounts with 2-step verification",  and you do not use an iPhone or iPad then you will not be impacted.

B.  If you have an iPhone or iPad, check if you configured your Google@UH account via Exchange Activesync (Google Sync)

2. If your LSA is set to ON, review the list of potential impacted applications below to determine if the third-party application you use is affected.

Users who may have this setting set to ON but do not use any third-party applications and only access their emails, calendars, and contacts on the web will not be impacted.

3. If you are using an affected application, review the options and instructions to remediate your specific application prior to June 4, 2024.

 

Potential Affected Applications

If your LSA is set to ON, review the following list to determine if you are using an application that may be affected.

Windows users of Outlook 2016 and older who are NOT using Google Workspace Sync for Microsoft Outlook (GWSMO)

To check if you are using Outlook 2016 or older:

  • Open Outlook
  • On the Help menu, select About Microsoft Office Outlook
  • See the version of Outlook listed: "Outlook 20xx"

To check if you are using GWSMO:

  • Open Outlook
  • On your Windows Taskbar, click the arrow up (^) near the date and time
  • Look for an icon with two green arrows in a circle shape . Hovering over this icon will show "Google Workspace Sync"
  • If you do not see an icon matching this description, you are not using GWSMO.

If you are using Outlook 2016 or older and are NOT using GWSMO, you are impacted. Please follow the instructions in the What Should Impacted Users Do? section.

macOS users of Outlook 2016 and older

To check if you are using Outlook 2016 or older:

  • Open Outlook
  • On the Help menu, select About Microsoft Office Outlook
  • See the version of Outlook listed: "Outlook 20xx"

If you are using Outlook 2016 or older, you are impacted. Please follow the instructions in the What Should Impacted Users Do? section.

iOS users connecting to their Google@UH account via Exchange Activesync (Google Sync)

To check if you are connected via Exchange Activesync (Google Sync) on your iOS device:

  • Open Settings on your iOS device
  • Depending on your iOS version, do one of the following actions:
    • Tap Mail and then Accounts
    • Tap Passwords & Accounts
  • Click on your Google@UH account(s)

If your Google@UH account says “EXCHANGE” above Account and your email address, you are impacted. Please follow the instructions in the What Should Impacted Users Do? section.

Users of Mozilla Thunderbird Connecting via UH Username and Password

To check if you are connected to Mozilla Thunderbird via UH Username and Password:

  • Open Mozilla Thunderbird
  • Open Settings (gear icon is found in the bottom left corner)
  • Click Account Settings (bottom left)
  • Click on Server Settings in the left navigation menu under your @hawaii.edu email account
  • Under Security Settings, look for the Authentication method
    • Note the Authentication method
  • In the left navigation menu under Local Folders, click on Outgoing Server (SMTP)
  • Look at Details of selected server > Authentication method
    • Note the Authentication method

If your Authentication method is not listed as OAuth2, you are impacted. Please follow the instructions in the What Should Impacted Users Do? section.

macOS Users of Mac Mail Connecting via UH Username and Password

To check if you are connected to Mac Mail via UH Username and Password:

  • Open Mac Mail
  • Click the Mail tab next to the Apple logo
  • Click Accounts…
  • Click on the account associated with your Google@UH account

If the icon next to your name and email address is a blue background with an @ symbol, then you are impacted. Please follow the instructions in the What Should Impacted Users Do? section.

Users of Any Application or Device Setup Using CalDAV (calendars) or CardDAV (contacts)

To check if you are using CalDAV on your iOS device:

  • Open Settings on your iOS device
  • Depending on your iOS version, do one of the following actions:
    • Tap Mail and then Accounts
    • Tap Passwords & Accounts
  • Click on your Google@UH account(s)

If your Google@UH account says “CALDAV” above Account and your email address, you are impacted. Please follow the instructions in the What Should Impacted Users Do? section.

If you are using CalDAV (calendars) or CardDAV (contacts), please follow the instructions in the What Should Impacted Users Do? section.

Users of Third-Party Email/Calendar/Contact Applications

If you are using a third-party calendar or contact application that is not listed above and unsure if you are impacted, please note the application and what it is used for and contact the ITS Help Desk at (808) 956-8883, toll-free at (800) 558-2669, or via email at help@hawaii.edu. 

 

What Should Impacted Users Do?

Impacted users should remediate their affected application(s) to prevent service disruption when LSA is disabled on June 4, 2024.

Windows users of Outlook 2016 and older without Google Workspace Sync for Microsoft Outlook (GWSMO)

Option 1: Install and connect via Google Workspace Sync for Microsoft Outlook (GWSMO)

  • Install GWSMO:
    • Download the GWSMO installer from Google at the following website: https://tools.google.com/dlpage/gssmo
    • Open the installer file named googleappssyncsetup.exe (typically located in the Downloads folder) and follow the on-screen instructions
  • Once GWSMO is installed, you will be prompted to sign in to your @hawaii.edu email account:
    • Enter your email address @hawaii.edu and click Continue
    • Enter your password and click Next
    • To provide access to your Google@UH account, click Allow

Option 2: Upgrade to and connect via Mozilla Thunderbird (free)

Option 3: Upgrade to and connect via a supported Outlook version (such as Outlook 2021)

Option 4: Access Gmail on the web

macOS users of Outlook 2016 and older

Option 1: Upgrade to and connect via Mozilla Thunderbird (free)

Option 2: Upgrade to and connect via a supported Outlook version (such as Outlook 2021)

Option 3: Access Gmail on the web

iOS users connecting to their Google@UH account via Exchange Activesync (Google Sync)

Option 1: Connect via Oauth using the iOS Mail app

  • Add your Google@UH account to the Mail app:
    • On your iOS device, open Settings
    • Depending on your iOS version, do one of the following actions:
      • Tap Mail and then Accounts and then Add Account
      • Tap Passwords & Accounts and then Add Account
    • Tap Google
    • Sign in using your Google@UH account
    • Close the settings and open the Mail app

Option 2: Install and use Google’s Gmail app

  • On your iOS device, open the App Store and search for Gmail
  • Follow the on-screen instructions to download and install the app (You might need to enter your Apple ID and password)
  • When the installation is complete, open Gmail
  • Tap Sign in and then Google and then Continue
  • Sign in using your Google@UH account
  • If you want to receive notifications from Gmail, tap Allow

Users of Mozilla Thunderbird Connecting via UH Username and Password

First, you will need to remove your account from Mozilla Thunderbird:

  • Navigate on Settings (gear icon)
  • Click Account Settings (bottom left)
  • In the left navigation menu, click the Account Actions dropdown menu
  • Select Remove Account > Remove

Next, you will need to set up your Google@UH account:

macOS Users of Mac Mail Connecting via UH Username and Password

You will need to remove your current account in Mac Mail before setting it up with OAuth 2.0:

  • Open Mac Mail
  • Click on the Mail tab next to the Apple logo
  • Click Accounts
  • Click on the Google account that is associated with your Google@UH gmail account
  • Click Delete Account…

Next, you will sign in again to Mac Mail to use the OAuth 2.0 authentication method:

  • Click on the Mail tab next to the Apple logo
  • Click Add Account…
  • Select the Google option
  • Sign in with your Google@UH gmail account email address
  • Click Allow to allow Mac Mail access to certain data in your Google@UH account
  • Select the apps that you want to use (if you are only using Mail, skip this step)
  • Click Done
  • It will take a couple of minutes for your emails to load depending on how many emails you have

Users of Any Application or Device Setup Using CalDAV (calendars) or CardDAV (contacts)

Option 1: Use Google@UH Calendar and Contacts over the web

Option 2: Re-connect via Oauth 2.0

 

Need Help?

Contact the ITS Help Desk at (808) 956-8883, toll-free at (800) 558-2669, or via email at help@hawaii.edu.

 

Please rate the quality of this answer: Poor Fair Okay Good Excellent
Not the answer you were looking for? Try different keyword combinations and if you still can’t find your answer, please contact us.
Article ID: 1901
Created: Wed, 13 Mar 2024 11:48am
Modified: Wed, 27 Mar 2024 9:17am