Configure Exchange Online with the Owl for Exchange add-on in Thunderbird
On this page:
Overview
To connect to Exchange Online at IU using Owl for Exchange in Thunderbird, follow these instructions. These steps have been tested on Windows, macOS, and Linux (specifically Debian) using Thunderbird 78.
username@iu.edu
. Depending on the client you are using, authentication may fail or you may get an error. If so, instead try ads\username
or ads.iu.edu\username
. You will then have to wait until after you've been migrated to update your username.
Add Owl for Exchange to Thunderbird
To add and enable the Owl for Exchange add-on in Thunderbird:
- In Thunderbird, click , and then select .
- In the search box, search for
owl
to find the Owl for Exchange add-on, and then click the corresponding icon. - When prompted to add Owl for Exchange, click , and then click .
Add your Exchange Online account
To add your IU Exchange Online account:
- Return to the tab, click , and find Owl for Exchange in the list of enabled extensions.
- Click the corresponding
), and then select or .
icon (
- Select
- Your name: Enter your name as you would like it displayed.
- Your email address: Enter your primary IU email address.
- Your username: Enter
username@iu.edu
(replaceusername
with your IU username). - Protocol: Select .
- Login method: Select .
- Webmail page: Enter
https://outlook.office.com/owa
.
, and then:
- Click .
- When prompted, confirm your identity with Two-step Login (Duo).
If you try to send a message immediately after adding your account, you may get the following error (or something similar):
Sending of the message failed.
The server is overloaded. (This operation exceeds the throttling budget for policy part 'LocalTime', policy value '0', Budget type: 'Owa'. Suggested backoff time 171572 ms.)
If you receive this error, wait five to 10 minutes, and then try to send your message again.
Install your S/MIME certificate
To install your S/MIME certificate:
- In Thunderbird for Windows, click , and then select . In Thunderbird for Linux, click , and then select . In Thunderbird for macOS, click .
- Click .
- Scroll to the bottom, and then click .
- Click , and then select .
- Locate and select your S/MIME certificate, and then click .
- Enter the password to install your certificate, and then click twice.
Set up S/MIME encryption
To set up your S/MIME certificate for use with your account:
- In Thunderbird for Windows or macOS, click , and then select . In Thunderbird for Linux, click , and then select .
- At the bottom right, click .
- Select your account, and then click .
- Click , and then, under "S/MIME" (beside "Personal certificate for digital signing", click .
- If your imported S/MIME certificate is not already selected, select it from the drop-down at the top, and then click
- When you see the following prompt, click
You should also specify a certificate for other people to use when they send you encrypted messages. Do you want to use the same certificate to encrypt & decrypt messages sent to you?
:
- Under "Default settings for sending messages", select and .
- Click , then , and then close Account Settings.
Secondary accounts
It is not possible to directly add secondary IU Exchange Online accounts (for example, group accounts) with Owl using their credentials. This will generate a "You already have an OWA account with this hostname" error. However, "Full Access" and "Send As" rights, as well as delegate access, will work using the Owl for Exchange add-on.
- If a secondary account is added as an additional account via OWA (so that it appears in the Add the shared mailbox so it displays under your primary mailbox), it also will appear in Thunderbird in the menu when you are logged into Exchange Online with Owl. "Full Access" rights and delegate access can be used to grant the ability to view a secondary account in this manner. menu when you are logged into OWA via your IU Exchange Online account, as described in
- "Send As" rights will work when sending a message. To change the sender address, in the new message window, click the field, and then select , and then enter the email address for which you have "Send As" rights.
- Delegate access also can be used to send messages "on behalf of" others, using the same method described above. The only difference is that "Send As" rights will make messages appear as if they were sent directly from the secondary account, whereas delegate access will show messages as being sent "on behalf of" the secondary account.
Known issues and unknowns
- Shared calendar access is not supported.
- S/MIME for secondary accounts is not supported. If you send from a secondary account using FASA or delegate access, and the message editor is set to digitally sign the message, it will attach the S/MIME certificate for your primary email account.
This is document hoot in the Knowledge Base.
Last modified on 2021-02-18 09:13:33.