gitea-pages/user-guide/thunderbird_for_o365.md

# Configure Thunderbird for 0ffice365

This guide shows how to access e-mail, address book and calendar with Thunderbird.

## Account and MFA ready?
Before connecting to Thunderbird to Office365, you need to have your MFA (Multi-Factor-Authentication) token/app configured.

If you use an app or SMS, then you can set it up directly at [Microsoft](https://aka.ms/mfasetup). Note that when you select the app and use "Use verification code", then you can also use 3rd party OTP apps.

For all the options check out the internal [knowledge base article](https://psi.service-now.com/kb_view.do?sysparm_article=KB0002928)


## Software Installed?

The package `thunderbird` needs to be installed before starting.


## Import PSI TLS Interception CA Certificate

Inside the PSI network access to E-Mail services using IMAP is protected by automatic malware scanning.

You get the [certificate in a zip file](https://drive.switch.ch/index.php/s/VK5zE9c0RRKIH8i/download) and unpack it.

Open Thunderbird. If this is your first account, it will show a account setup assisant which you can exit or close.

![Open Settings](thunderbird_for_o365/thunderbird01_open_settings.png)

Then open the hamburger menu at the top right and select "Settings".

![Search for Certificate Settings](thunderbird_for_o365/thunderbird02_certificate_settings.png)

There type `certificate` into the search box at the top right. Then press below the "Manage Certificates..." button.

![Certificate Manager Dialog](thunderbird_for_o365/thunderbird02b_certficate_dialog.png)

Open the "Authorities" tab.

![Search for Certificate Settings](thunderbird_for_o365/thunderbird03_certificate_import.png)

Here click on "Import..." and then select the previously downloaded and unpacked file "cert_PSI_FW_SSL_Scanner_TRUST.crt".

![Trust Certificate](thunderbird_for_o365/thunderbird04_trust_certificate.png)

Now tick the checkbox "Trust this CA to identify websites" and confirm this and the previous dialog with "OK". Finally close the "Settings" tab.


## Configure Your Mail Account

To add a new account open the hamburger menu on the top right. There choose "New" -> "Existing Mail Account...".

![Set Up Your Existing Email Address](thunderbird_for_o365/thunderbird05_address_entry.png)

Here please enter first the full name (as it should be shown in outgoing emails) and your email address. As no password is used yet remove the "Remember password" tick and go on by clicking the small "Configure manually" link, which opens more options below:

![Incoming Server Options](thunderbird_for_o365/thunderbird06_incoming_server_entry.png)

For "INCOMING SERVER" set the "Hostname" to `outlook.office365.com`, the "Port" to `993` and select `SSL/TLS` in the "Connection security" dropdown if that does not happen automatically. For "Authentication method" select `OAuth2`.

![Outgoing Server Options](thunderbird_for_o365/thunderbird07_outgoing_server_entry.png)

For "OUTGOING SERVER" set the "Hostname" to `smtp.office365.com`, the "Port" to `587` and select `STARTTLS` in the "Connection security" dropdown. For "Authentication method" select `OAuth2` and then finish by clicking on "Done".

![OAuth2 Login](thunderbird_for_o365/thunderbird08_oauth_login.png)

This is followed by a Microsoft login page where you need to enter your normal PSI AD/Windows password, maybe asking for second factor authentification (Authenticator app or token code).

![Done](thunderbird_for_o365/thunderbird09_success.png)

With successful authentication you then close the "Account Setup" tab and enjoy the inbox or use one of the direct links for further configuration tuning, for some of them see the next two chapters.


## Use O365 Default Folders

Thunderbird and O365 use by default different folders for sent and deleted messages.

![Open Account Settings](thunderbird_for_o365/thunderbird10_account_settings.png)

Via the hamburger menu at the top right open the "Account Settings" window.


### Folder for Deleted Messages

![Account Settings for Deleted Messages](thunderbird_for_o365/thunderbird11_deleted_folder.png)

Then select for your account "Server Settings" and there select the "Deleted Items" entry in the dropdown menu "When I delete a message: Move it to this folder:".

This only needs to be done once, because after Thunderbird has marked the folders once on the server any other Thunderbird instance connecting to it will automatically use the correct folder.


### Folder for Sent Messages

![No Sent Messages Copy](thunderbird_for_o365/thunderbird12_no_copy_of_sent_messages.png)

O365 seams to automatically put on server side a copy into the "Sent Items" folder, so Thunderbird does not need to do so.
Go to "Copies & Folders" of your account and untick below "When sending messages, automatically:" the "Place a copy in:" option.

Best you send now a test message and check if you get a copy in "Sent Items".


## Addressbook with PSI Email Adresses

![Open Settings](thunderbird_for_o365/thunderbird01_open_settings.png)

Open again the "Settings".

![Search for Directory](thunderbird_for_o365/thunderbird30_directory_settings.png)

There type `directory` into the search box at the top right. Then select below the "Directory Server" checkbox, followed by clicking the "Edit Directories..." button.

![Add new Directory](thunderbird_for_o365/thunderbird31_add_directory.png)

On the newly opened dialog click on "Add".

![Edit Directory Settings](thunderbird_for_o365/thunderbird32_new_directory_settings.png)

Here fill in the following:  
Name: `PSI AD`  
Hostname: `d.psi.ch`  
Base DN: `ou=PSI,dc=d,dc=psi,dc=ch`  
Port number: `636`  
Bind DN: `CN=$USER,OU=users,OU=psi,DC=d,DC=psi,DC=ch`, where you replace `$USER` with your Windows/AD login name.

Also select the "Use secure connection (SSL)" checkbox.

Next click on the "Advanced" tab.

![Edit Advanced Directory Settings](thunderbird_for_o365/thunderbird33_advanced_directory_settings.png)

Here set the "Search filter" to `(mail=*)`, then press "OK".


![Close Directory Settings](thunderbird_for_o365/thunderbird34_close_directory_settings.png)

Another time click "OK"

![Select PSI AD Directory](thunderbird_for_o365/thunderbird35_select_directory.png)

Now select in the "Directory Server" dropdown the newly added `PSI AD` directory. 


![Config Editor](thunderbird_for_o365/thunderbird36_config_editor.png)

Now open the "Config Editor", you find it fastest by entering `editor` at the search field in the top right.

![Config Editor Opened](thunderbird_for_o365/thunderbird37_config_editor_open.png)

Therein search for `displayname`

![Config Editor Search](thunderbird_for_o365/thunderbird38_config_editor_search.png)

and on the line "ldap_2.servers.default.attrmap.DisplayName" click onto the edit button on the right.

![Change DisplayName](thunderbird_for_o365/thunderbird39_config_editor_change.png)

Now change the value to `displayName`. Save it with the save button on the right side. Then close the "Config Editor" and the "Settings" tab. Then close Thunderbird as the last configuration change is only active after restart.

The next time you write a new message and enter something into the "To" line,

![Directory Password](thunderbird_for_o365/thunderbird40_directory_password.png)

you need to enter your Windos/AD password and then it will also search the PSI wide user directory.


## Calendar Integration

The calendar can be synchronized using the [TbSync](https://github.com/jobisoft/TbSync) add-on.

![Open Add-on Manager](thunderbird_for_o365/thunderbird60_open_addons.png)

Open the hamburger menu at the top right and select "Add-ons and Themes".

![Search tbsync in Add-on Manager](thunderbird_for_o365/thunderbird61_search_tbsync.png)

In the Add-on Manager search in the top right search box for `tbsync`.

![Install tbsync in Add-on Manager](thunderbird_for_o365/thunderbird62_select_tbsync.png)

In the result list below click on the button "+ Add to Thunderbird" for the "TBSync" result line.

![Install tbsync in Add-on Manager](thunderbird_for_o365/thunderbird63_install_tbsync.png)

Now click on "Add"

![Installed tbsync in Add-on Manager](thunderbird_for_o365/thunderbird64_installed_tbsync.png)

and "OK.

![Installed tbsync in Add-on Manager](thunderbird_for_o365/thunderbird65_select_eas.png)

Next we also need the connector to O365, so please also look for the "Provider for Exchange ActiveSync" and click on that line again the button "+ Add to Thunderbird".

![Install Provider for Exchange ActiveSync in Add-on Manager](thunderbird_for_o365/thunderbird66_install_eas.png)

Here again click on "Add"

![Install Provider for Exchange ActiveSync in Add-on Manager](thunderbird_for_o365/thunderbird67_installed_eas.png)

and "OK".

![Open TbSync](thunderbird_for_o365/thunderbird68_open_tbsync.png)

To configure TbSync click onto "TbSync: Idle" on very right in the footer of the Thunderbird window.

![Add Exchange ActiveSync](thunderbird_for_o365/thunderbird69_add_exchange_activesync_account.png)

To add a new account, open the dropdown "Account actions" at the bottom left. Therein select "Add new account" and "Exchange ActiveSync".

![Enter information for Exchange ActiveSync account](thunderbird_for_o365/thunderbird70_add_o365_account.png)

In this dialog select "Microsoft Office 365", then at "Account name" add suitable name for the calendar, followed by the respective email address in the field "User name (email address)". Finish with clicking onto "Add account".

![Authenticate at O365](thunderbird_for_o365/thunderbird71_o365_oauth.png)

Now authenticate with Microsoft.

![Enable O365 calendar sync](thunderbird_for_o365/thunderbird72_activate_o365_calendar_sync.png)

Now with the account set up enable the checkbox "Enable and synchronize this account".

![Configure O365 calendar sync](thunderbird_for_o365/thunderbird73_configure_o365_calendar_sync.png)

In the now newly shown configuration pane select the parts you want to synchronize (probably "Calendar", maybe also "Contacts".
Further below set the "Periodic synchronization (in minutes)" to a value like `10` to allow for automatic synchronization.
Now start manually a synchronization by pressing the "Synchronize Now" button.

![O365 calendar sync done](thunderbird_for_o365/thunderbird74_o365_calendar_sync_done.png)

Now all "Status" should be "OK". Close the "TbSync account manager" dialog.


![O365 calendar sync done](thunderbird_for_o365/thunderbird75_open_calendar.png)

Finally you can enjoy your calendar.