Secure Mail: "Please resolve expired or locked passwords before continuing"

[Patrick Hjelt]

Yesterday all our Secure Mail users were suddenly greeted with a password prompt, followed by a "Please resolve expired or locked passwords before continuing", with only a Try Again-button. I have not done any recent policy changes, and I have the latest (22.9.0) MDX files applied. This happens on both iOS and Android. We're running XenMobile 10.12.0.8, on prem, with latest patch 10.12.0.11103 installed. Does anyone have any good troubleshooting tips for this?

[Patrick Hjelt]

I (or rather Citrix support) figured this out; we had not enabled Microsoft Modern Authentication (OAuth) in Secure Mail, and Microsoft has now disabled Basic Authentication for all tenants starting October 1 2022 (but apparently this didn't take effect until a few weeks later). Turning on OAuth in Secure Mail app settings fixed this (in my case an account deletion was necessary first to get the new account sign-in info accepted, probably due to differing UPN vs. e-mail settings).