Enable 2FA in Mailcow admin blocks Activesync

gooseleggs

I have just set up a Mailcow mail server to replace my old iRedmail server. All is going well. I have this behind an NGINX reverse proxy. However, if I go into the main mailcow application (not SOGo or Roundcube), and I enable MFA either by TOTP or Webauthn, the ActiveSync breaks (only tested on iOS). It starts working again when I deactivate TOTP 2FA.

I was hoping to have the web interface 2FA, but it appears that this is not the case.
Anyone else experienced this? Any idea how to resolve?

esackbauer

Use App Passwords for ActiveSync.

And do not use 2FA in SOGo, just use it in mailcow UI and disable SOGo direct login.
So you have to open Webmail after you logged in in mailcow UI, that way you need to have only one 2FA code.