Scan to email stopped working with Microsoft 365?

If your copier or multifunction printer emails scans through Microsoft 365 with a username and password, it will stop at the end of December 2026. This page explains why and lists the fixes, cheapest first.

Last verified: November 14, 2026

The error you'll see

The printer reports a failed send, and its log or the bounce message shows:

550 5.7.30 Basic authentication is not supported for Client Submission

Some printers show only a generic "send failed" or "authentication error", or a code such as 535 5.7.139. If your printer is set to use smtp.office365.com on port 587 with a mailbox username and password, this change applies to you.

What Microsoft is changing, and when

• Until the end of December 2026: nothing changes.
• End of December 2026: password sign-in for sending mail ("SMTP AUTH basic authentication") is turned off by default for existing Microsoft 365 organizations. An administrator can still turn it back on.
• New Microsoft 365 organizations created after December 2026: password sign-in for sending isn't available.
• Second half of 2027: Microsoft will announce the date it is removed for good.

Source: Microsoft Exchange Team, January 2026 timeline update.

Your fixes, cheapest first

1. Turn password sign-in back on (stopgap)

   Cost: free, a few minutes for your Microsoft 365 admin. Lasts until: Microsoft's final removal date, expected to be announced in late 2027.

   Microsoft says administrators can re-enable it after the December switch-off. Use this to buy time, not as the plan.

2. Update the printer's firmware and switch to OAuth

   Cost: free. Lasts: long term. Catch: only some models support it, and usually only with recent firmware.

   OAuth lets the printer sign in to Microsoft 365 with a token instead of a password. Support varies by model; see your printer's page. Vendor guides and third-party lists disagree, so check your exact model against the manufacturer's documentation.

3. Use Microsoft's own options: direct send or an SMTP relay connector

   Cost: free with Microsoft 365. Catch: direct send only delivers to people inside your organization. The relay connector can send anywhere but needs a static public IP address and some admin setup.

   Both point the printer at your domain's mail.protection.outlook.com address instead of smtp.office365.com. See Microsoft's setup guide.

4. Use a third-party SMTP relay service

   Cost: often free for low volumes, paid above that. Best for: printers that can't do OAuth, in offices without a static IP or an admin who wants to manage connectors.

   The printer sends to the relay with a username and password, and the relay delivers the mail. You change the server name, port and login on the printer. Before choosing one, set up SPF and DKIM for your domain so scans don't land in junk folders.

Find your printer

Model-by-model pages with the exact menu path and minimum firmware are being added. See the printer list.