I have a general question about setting up workflows for others.
I have a workflow that reads emails from a hosted Office365 email account. When it’s my own account this is not a problem. But if I’m asking a third party (e.g. a customer), to share with me their login credentials this might make them nervous.
Now, if I control the workflow it doesn’t really matter if they are nervous or not, because technically once I have their credentials to run the workflow I can access their emails anyway.
But, what about the case of someone using 2FA.
How do you get someone else’s credentials into n8n when 2FA is involved?
Do we have to expose n8n to them, or is there another way?
I believe as you are using a third parties credentials you may be crossing over the line and may need a special license if you don’t already have one.
We don’t yet have a way to expose the credential endpoint to users so they would need access to n8n or you would need to use something like nango and the n8n api. As Microsoft365 uses OAuth the user will be asked for their MFA code when signing in and once the tokens are issued it will keep refreshing with no issue.