Bugzilla

Hi All,

If you have an account on GCC or GCC High, you have your own valid Office365 Client ID, and you're willing to test an experimental capability, we're in need of folks with access to those national clouds to test our experimental capability for entering custom OAuth2 client IDs, tenant IDs, and scopes to see if they work on the national cloud deployments. Here are general instructions on how to test this on GCC High:

Prerequisites:
1. In Settings->General->Config Editor, search for the preference `experimental.mail.ews.overrideOAuth.enabled`.
2. Have at least one other email account set up (so that adding a new account brings up the new Account Hub interface)

Steps to try:
1. Create a new email account (hamburger menu->New Account->EMail). You should see the account hub interface.
2. Enter your GCC High email address.
3. Click on the "Manual Configuration" link.
4. Under protocol, choose "EWS".
5. Under "EWS Endpoint URL" set "https://outlook.office365.us/EWS/Exchange.asmx". Note that the host should be adapted to your national cloud instance. For GCC High, the correct value is outlook.office365.us (see [this Microsoft documentation page](https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-u-s-government-gcc-high-endpoints?view=o365-worldwide) to verify).
6. Under "Authentication Method" select "OAuth2".
7. Click the "Advanced Config" link and accept the resulting dialog to confirm advanced configuration.
8. You should be placed directly in the account settings screen for your GCC High account.
9. In the server settings for that account click the topmost "Advanced..." button. You should get an Advanced Account Settings dialog with options to set the host URL and override Office365 settings.
10. In the dialog, verify your URL is the correct GCC High URL.
11. Check the "Override Office365 Settings" box.
12. Enter your client ID in the "Application ID" Field.
13. If you also have your own tenant, enter that into the Tenant ID field, otherwise enter "common".
14. Set your redirect URI to "https://localhost".
15. Set your endpoint host to the host name for your national cloud. For GCC High, this should be "login.microsoftonline.us" (see the above linked Microsoft documentation page for verification).
16. Set the OAuth scopes field to "offline_access https://outlook.office.com/EWS.AccessAsUser.All".
17. Press OK
18. Go to the email account in the main part of the application and trigger a remote operation. (The easiest is to trigger a sync with the cloud/down arrow icon in the upper left).
19. You should be presented with your Microsoft cloud login flow.
20. Folders and emails should sync.

The Thunderbird development team does not have access to GCC High, so anyone who can test this for us in different environments will help us develop this capability further and move it from experimental to supported.

Thank you!

Hi All,

If you have an account on GCC or GCC High, you have your own valid Office365 Client ID, and you're willing to test an experimental capability, we're in need of folks with access to those national clouds to test our experimental capability for entering custom OAuth2 client IDs, tenant IDs, and scopes to see if they work on the national cloud deployments. Here are general instructions on how to test this on GCC High:

Prerequisites:
1. In Settings->General->Config Editor, search for the preference `experimental.mail.ews.overrideOAuth.enabled`.
2. Have at least one other email account set up (so that adding a new account brings up the new Account Hub interface)
3. Be running Thunderbird 147 (current daily as of the time of this writing)

Steps to try:
1. Create a new email account (hamburger menu->New Account->EMail). You should see the account hub interface.
2. Enter your GCC High email address.
3. Click on the "Manual Configuration" link.
4. Under protocol, choose "EWS".
5. Under "EWS Endpoint URL" set "https://outlook.office365.us/EWS/Exchange.asmx". Note that the host should be adapted to your national cloud instance. For GCC High, the correct value is outlook.office365.us (see [this Microsoft documentation page](https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-u-s-government-gcc-high-endpoints?view=o365-worldwide) to verify).
6. Under "Authentication Method" select "OAuth2".
7. Click the "Advanced Config" link and accept the resulting dialog to confirm advanced configuration.
8. You should be placed directly in the account settings screen for your GCC High account.
9. In the server settings for that account click the topmost "Advanced..." button. You should get an Advanced Account Settings dialog with options to set the host URL and override Office365 settings.
10. In the dialog, verify your URL is the correct GCC High URL.
11. Check the "Override Office365 Settings" box.
12. Enter your client ID in the "Application ID" Field.
13. If you also have your own tenant, enter that into the Tenant ID field, otherwise enter "common".
14. Set your redirect URI to "https://localhost".
15. Set your endpoint host to the host name for your national cloud. For GCC High, this should be "login.microsoftonline.us" (see the above linked Microsoft documentation page for verification).
16. Set the OAuth scopes field to "offline_access https://outlook.office.com/EWS.AccessAsUser.All".
17. Press OK
18. Go to the email account in the main part of the application and trigger a remote operation. (The easiest is to trigger a sync with the cloud/down arrow icon in the upper left).
19. You should be presented with your Microsoft cloud login flow.
20. Folders and emails should sync.

The Thunderbird development team does not have access to GCC High, so anyone who can test this for us in different environments will help us develop this capability further and move it from experimental to supported.

Thank you!

Hi All,

If you have an account on GCC or GCC High, you have your own valid Office365 Client ID, and you're willing to test an experimental capability, we're in need of folks with access to those national clouds to test our experimental capability for entering custom OAuth2 client IDs, tenant IDs, and scopes to see if they work on the national cloud deployments. Here are general instructions on how to test this on GCC High:

Prerequisites:
1. In Settings->General->Config Editor, search for the preference `experimental.mail.ews.overrideOAuth.enabled`.
2. Have at least one other email account set up (so that adding a new account brings up the new Account Hub interface)
3. Be running Thunderbird >= 147 (current daily as of the time of this writing)

Steps to try:
1. Create a new email account (hamburger menu->New Account->EMail). You should see the account hub interface.
2. Enter your GCC High email address.
3. Click on the "Manual Configuration" link.
4. Under protocol, choose "EWS".
5. Under "EWS Endpoint URL" set "https://outlook.office365.us/EWS/Exchange.asmx". Note that the host should be adapted to your national cloud instance. For GCC High, the correct value is outlook.office365.us (see [this Microsoft documentation page](https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-u-s-government-gcc-high-endpoints?view=o365-worldwide) to verify).
6. Under "Authentication Method" select "OAuth2".
7. Click the "Advanced Config" link and accept the resulting dialog to confirm advanced configuration.
8. You should be placed directly in the account settings screen for your GCC High account.
9. In the server settings for that account click the topmost "Advanced..." button. You should get an Advanced Account Settings dialog with options to set the host URL and override Office365 settings.
10. In the dialog, verify your URL is the correct GCC High URL.
11. Check the "Override Office365 Settings" box.
12. Enter your client ID in the "Application ID" Field.
13. If you also have your own tenant, enter that into the Tenant ID field, otherwise enter "common".
14. Set your redirect URI to "https://localhost".
15. Set your endpoint host to the host name for your national cloud. For GCC High, this should be "login.microsoftonline.us" (see the above linked Microsoft documentation page for verification).
16. Set the OAuth scopes field to "offline_access https://outlook.office.com/EWS.AccessAsUser.All".
17. Press OK
18. Go to the email account in the main part of the application and trigger a remote operation. (The easiest is to trigger a sync with the cloud/down arrow icon in the upper left).
19. You should be presented with your Microsoft cloud login flow.
20. Folders and emails should sync.

The Thunderbird development team does not have access to GCC High, so anyone who can test this for us in different environments will help us develop this capability further and move it from experimental to supported.

Thank you!

Hi All,

If you have an account on GCC or GCC High, you have your own valid Office365 Client ID, and you're willing to test an experimental capability on daily, we're in need of folks with access to those national clouds to test our experimental capability for entering custom OAuth2 client IDs, tenant IDs, and scopes to see if they work on the national cloud deployments. Here are general instructions on how to test this on GCC High:

Prerequisites:
1. In Settings->General->Config Editor, search for the preference `experimental.mail.ews.overrideOAuth.enabled`.
2. Have at least one other email account set up (so that adding a new account brings up the new Account Hub interface)
3. Be running Thunderbird >= 147 (current daily as of the time of this writing)

Steps to try:
1. Create a new email account (hamburger menu->New Account->EMail). You should see the account hub interface.
2. Enter your GCC High email address.
3. Click on the "Manual Configuration" link.
4. Under protocol, choose "EWS".
5. Under "EWS Endpoint URL" set "https://outlook.office365.us/EWS/Exchange.asmx". Note that the host should be adapted to your national cloud instance. For GCC High, the correct value is outlook.office365.us (see [this Microsoft documentation page](https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-u-s-government-gcc-high-endpoints?view=o365-worldwide) to verify).
6. Under "Authentication Method" select "OAuth2".
7. Click the "Advanced Config" link and accept the resulting dialog to confirm advanced configuration.
8. You should be placed directly in the account settings screen for your GCC High account.
9. In the server settings for that account click the topmost "Advanced..." button. You should get an Advanced Account Settings dialog with options to set the host URL and override Office365 settings.
10. In the dialog, verify your URL is the correct GCC High URL.
11. Check the "Override Office365 Settings" box.
12. Enter your client ID in the "Application ID" Field.
13. If you also have your own tenant, enter that into the Tenant ID field, otherwise enter "common".
14. Set your redirect URI to "https://localhost".
15. Set your endpoint host to the host name for your national cloud. For GCC High, this should be "login.microsoftonline.us" (see the above linked Microsoft documentation page for verification).
16. Set the OAuth scopes field to "offline_access https://outlook.office.com/EWS.AccessAsUser.All".
17. Press OK
18. Go to the email account in the main part of the application and trigger a remote operation. (The easiest is to trigger a sync with the cloud/down arrow icon in the upper left).
19. You should be presented with your Microsoft cloud login flow.
20. Folders and emails should sync.

The Thunderbird development team does not have access to GCC High, so anyone who can test this for us in different environments will help us develop this capability further and move it from experimental to supported.

Thank you!