# Gmail Removing Support for 'Less Secure Apps'

**URL:** <https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238>\
**Category:** Ignition\
**Created:** [January 12, 2020, 10:28pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238 "2020-01-12T22:28:24Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![rberghammer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rberghammer/32/7150_2.png) [@rberghammer](https://forum.inductiveautomation.com/u/rberghammer)\
**Post date:** [January 12, 2020, 10:28pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/1 "2020-01-12T22:28:25Z")

</div>

I am currently using G-Suite/Gmail to send alarm notifications. In order to make this work, I had to enable “Less Secure Apps” in Google settings. I recently received an email from Google that says:

“Starting February 15, 2021, G Suite accounts will only allow access to apps using OAuth. Password-based access will no longer be supported.”

It goes on to say “Access to LSAs will be turned off for all G Suite accounts”.

Is this something we should be worried about? Is Ignition planning on adding support for OAuth? I don’t know much about this topic, so please let me know if this is already possible.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [January 12, 2020, 11:58pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/2 "2020-01-12T23:58:16Z")

</div>

Yes, this will eventually be a problem.

OAuth isn’t really doable right now and I’m not sure how much that will change - it’s a flow that requires interaction and a browser component, which makes it less than ideal for use in scripting or a backend process like alarm notification.

It might turn out that it’s possible to set it up once on the Ignition gateway and have it not expire for a long time but I’m not sure right now.

Your best bet is to switch to a paid mail service other than Gmail/GSuite if you don’t have your own internal IT department running a mail server.

---

<div class="post-metadata">

**Author:** ![rberghammer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rberghammer/32/7150_2.png) [@rberghammer](https://forum.inductiveautomation.com/u/rberghammer)\
**Post date:** [January 13, 2020, 12:49am UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/3 "2020-01-13T00:49:21Z")

</div>

Thanks for the info Kevin. I will look into switching to a different service.

---

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [January 13, 2020, 1:33pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/4 "2020-01-13T13:33:54Z")

</div>

As SMTP support is getting tougher and tougher ([[14945] Email still using TLSV1](http://forum.inductiveautomation.com/t/14945-email-still-using-tlsv1/28051/3)) I have been migrating some of my other systems over to a mail sending service that can more easily evolve over time. It seems to be easier to support and requires my apps don’t need to deal with SMTP.

The most recent one I like is MailGun. [https://www.mailgun.com/](https://www.mailgun.com/) Its basically email for devs and backends where all interaction can be done via REST and webhooks. It might be something to look into an option for notifications and such in Ignition to support some type of REST style email service in the future.

---

<div class="post-metadata">

**Author:** ![rberghammer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rberghammer/32/7150_2.png) [@rberghammer](https://forum.inductiveautomation.com/u/rberghammer)\
**Post date:** [January 13, 2020, 2:38pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/5 "2020-01-13T14:38:56Z")

</div>

You seem to know more about email than I do, so maybe you can answer a question I have. Could a service like MailGun be used to get around my problem with GSuite? What I mean is, could I connect Ignition to MailGun and then have MailGun relay emails through GSuite using an OAuth connection?

The reason I’m thinking about this is because I currently have GSuite sending emails from addresses in my domain (i.e. [alarms@mydomain.com](mailto:alarms@mydomain.com)). I would prefer to continue using this address. My alternative would be to sign up for MainGun with a different domain like [alarms@mydomain-alarms.com](mailto:alarms@mydomain-alarms.com).

I’m also assuming I can’t have two services sending emails from the same domain. If this is not the case, I wouldn’t mind moving the [alarms@mydomain.com](mailto:alarms@mydomain.com) from GSuite to another service, but continuing to use GSuite for other accounts.

---

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [January 13, 2020, 3:19pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/6 "2020-01-13T15:19:05Z")

</div>

> [@rberghammer](#):
>
> I’m also assuming I can’t have two services sending emails from the same domain. If this is not the case, I wouldn’t mind moving the [alarms@mydomain.com](mailto:alarms@mydomain.com) from GSuite to another service, but continuing to use GSuite for other accounts.

You can have multiple services sending emails for the same domain... Any server can send emails for your domain provided you have the right setup.

The easiest would be to use another mail service for sending. Do you have a webhost or something? A internal email server beyond gmail? All you need is an SMTP relay, you could even add an SMTP server to the Ignition server if you want. The trick (and every email service is different) is to ensure the security and domain settings are correct to ensure you messages are not flagged as spam/phishing... GSuite should be able to walk you through the correct settings somewhere.

Mailgun does offer outbound SMTP services as well, so it would be worth a shot. They seems good at being easily to setup and walked me through all the domain configuration when I did it. They you would just connect Ignition to their SMTP service.

---

<div class="post-metadata">

**Author:** ![rberghammer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rberghammer/32/7150_2.png) [@rberghammer](https://forum.inductiveautomation.com/u/rberghammer)\
**Post date:** [January 14, 2020, 3:40am UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/7 "2020-01-14T03:40:30Z")

</div>

I will look into using another mail service to send alarms for Ignition while keeping GSuite for other accounts. MailGun or some other service sound like they may be what I need. We don’t have our own mail server outside of gmail, but I may try to set one up on Azure someday.

Thanks for your help!

---

<div class="post-metadata">

**Author:** ![nskoog](https://avatars.discourse-cdn.com/v4/letter/n/ebca7d/32.png) [@nskoog](https://forum.inductiveautomation.com/u/nskoog)\
**Post date:** [July 1, 2022, 4:23pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/8 "2022-07-01T16:23:54Z")

</div>

We had a Gmail account for a customer for sending reports/alarm emails stop working at the end of May. Is SMTP going to be a long term solution for email notification from Ignition if providers are ending their access to it? The customer’s IT was unable to get their Zoho email connected to Ignition due their security policies which is why we gave them a Gmail account. Just wondering if eventually we will have the same problem in the future even if we do switch to a new Email provider.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 1, 2022, 4:42pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/9 "2022-07-01T16:42:30Z")

</div>

We're working on OAuth client support in Ignition as well as an Email profile type that can use a configured OAuth client, which should let you switch from the away from "Less Secure Apps" setup when it's ready.

> [@nskoog](#):
>
> Just wondering if eventually we will have the same problem in the future even if we do switch to a new Email provider.

You're willingly adding a 3rd party cloud dependency. You're at their whim, and something can always change or go wrong.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [July 1, 2022, 4:46pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/10 "2022-07-01T16:46:40Z")

</div>

> [@Kevin.Herron](#):
>
> You’re at their whim

Yup. Running a mailserver is not trivial, but it isn't rocket science either. My tiny company runs its own (that is, me), and I run another for my family. I'd have fired Zoho for not helping prepare a secure path. It can be done without OAuth.

---

<div class="post-metadata">

**Author:** ![nskoog](https://avatars.discourse-cdn.com/v4/letter/n/ebca7d/32.png) [@nskoog](https://forum.inductiveautomation.com/u/nskoog)\
**Post date:** [July 1, 2022, 6:59pm UTC](https://forum.inductiveautomation.com/t/gmail-removing-support-for-less-secure-apps/31238/11 "2022-07-01T18:59:12Z")

</div>

> [@Kevin.Herron](#):
>
> We’re working on OAuth client support in Ignition

Any idea when this will be ready?
