Specify the following values to connect to the Microsoft 365 target email service:

• Server Name — You can enter the name of the Microsoft 365 server as it appears in the address bar when you log in as an administrator to your account, or you can use the auto-discovery option.
• Use Modern Authentication — You can use Modern Authentication to connect to Microsoft 365. The Use Modern Authentication option lets you grant consent to ODME instead of providing Administrative credentials with Application Impersonation rights. This option is enabled for any newly created plan by default.
  When the Use Modern Authentication option is enabled, the Forwarding section in a plan’s Options page contains additional fields where you need to specify the credentials of the account which has the permissions to modify forwarding settings.
  

  Note: The Use Modern Authentication option is supported for connections to the Microsoft 365 Worldwide. The option is not supported for connections to the Microsoft 365 hosted in the Germany, China or US Government environments (Microsoft 365 GCC High).

• Use auto-discovery — It is recommended that you use auto-discovery to obtain the name of your Microsoft 365 server.

Auto-discovery uses your login credentials to automatically obtain the server name during a migration. With auto-discovery, On Demand Migration for Email connects directly to the Microsoft 365 auto-discovery endpoints, meaning that you don't have to configure your DNS to take advantage of auto-discovery. You do need to make sure that all your mailboxes exist in Microsoft 365 before migrating data into them.

• Use end-user credentials — Select this option if you want to connect to the email service using the passwords for each mailbox instead of the credentials of the administrator account. If selected, you must specify the password for each target mailbox. For more information, see Adding Mailboxes.
• Admin User Name and Password — The name and password of the administrator account.

To migrate data to Microsoft 365, your administrator account must have Application Impersonation rights, which means the account must be assigned to a Role-Based Access Control group that has Application Impersonation rights. For more information, see Preparing Your Target Email Service for Migration.