You can choose Basic authentication or Modern authentication (OAuth 2.0) as the authentication method when configuring the Exchange Online data sources.

• Exchange Online Native/Hybrid User Configuration
• Exchange Online Native/Hybrid Mailbox Configuration
• Exchange Online Mailbox Contents
• Exchange Online Public Folders

In the above data sources, you can choose the version (V1 or V2) of Exchange Online PowerShell Module that you would like to use, if you have selected Modern authentication (OAuth 2.0) as the authentication method.

Additionally, in the following data sources, PowerShell module MSOnline is used.

• Exchange Online Hybrid User Configuration
• Exchange Online Hybrid Mailbox Configuration
• Office 365 User Subscription Configuration

Global Cloud

Selecting Basic authentication, UC Analytics would use the following PowerShell cmdlets connecting to Exchange Online.

Selecting Modern authentication (OAuth 2.0), you can choose the version of Exchange Online PowerShell Module (V1 or V2) that is installed on the UC Analytics server and used to connect to Office 365.

If Exchange Online PowerShell Module V1 is chosen, the following PowerShell cmdlets will be used to connect to Exchange Online.

Note: You must use the same account that is used as UC Analytics service account (more specifically, Data Engine service account), when installing the Exchange Online PowerShell Module V1.

For more details, please check the deployment guide. Or, you may check the articles below.

• https://docs.microsoft.com/en-us/powershell/exchange/v1-module-mfa-connect-to-exo-powershell?view=exchange-ps
• https://o365reports.com/2019/04/17/connect-exchange-online-using-mfa/

If Exchange Online PowerShell Module V2 is chosen, the following PowerShell cmdlets will be used to connect to Exchange Online.

For more details, please check the deployment guide. Or, you may check the articles below.

• https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps#install-and-maintain-the-exo-v2-module
• https://o365reports.com/2019/12/11/connect-exchange-online-powershell-without-basic-authentication/

The following collection jobs leverage PowerShell module MSOnline to connect to Office 365.

• Exchange Online Hybrid User Configuration
• Exchange Online Hybrid Mailbox Configuration
• Office 365 User Subscription Configuration

The connection PowerShell cmdlets are as below.

Microsoft National Cloud

If you are running a Microsoft national cloud, you must update or add an additional parameter to make the PowerShell cmdlets work. Take the national cloud "Office 365 operated by 21Vianet in China" for example.

For Basic authentication, update -ConnectionUri in the New-PSSession command.

For Modern authentication, update -ConnectionUri and also add -AzureADAuthorizationEndpointUri in the New-ExoPSSession command.

For PowerShell module MSOnline, add -AzureEnvironment in the Connect-MsolService command.

For other national clouds, you may find the corresponding -ConnectionUri, -AzureADAuthorizationEndPointUri, -AzureEnvironment parameters in the table below.

Note: If you are running a Microsoft national cloud, in the UC Analytics web portal, you must configure the connection endpoints in the Target Environment settings.

Proxy

If there is a proxy configured in your environment, you must add an additional parameter to make the PowerShell cmdlets work, including Basic and Modern authentication (V1/V2). (Not necessary for MSOnline module. More on that later.)

For Basic authentication, add -SessionOption in the New-PSSession command.

For Modern authentication, add -PSSessionOptionin the New-ExoPSSession command.

Also, you must configure the values of powerShellProxyAccessType in the following sections within the UC.Analytics.Insights.DataEngine.DataCollector.dll.config file under C:\Program Files\Quest\UC Analytics\Data Engine, on all the UC Analytics servers.

• exchangeOnlineMailboxContentsJobSettings
• exchangeOnlineUserJobSettings
• exchangeOnlineMailboxJobSettings
• exchangeOnlinePublicFoldersJobSettings

The available values for powerShellProxyAccessType are:

• None
• IEConfig
• WinHttpConfig
• AutoDetect
• NoProxyServer

See the descriptions for the values of powerShellProxyAccessType at: https://docs.microsoft.com/en-us/dotnet/api/system.management.automation.remoting.proxyaccesstype.

You must restart Data Engine service to make the settings come into effect.

Note: The PowerShell module MSOnline uses the proxy settings for Internet Explorer. No additional parameter is required in the PowerShell cmdlets.

You must ensure that the Internet Explorer proxy settings for the service account are set correctly.