In Gnome Evolution, one can get authenticated against Microsoft by leveraging device trust that is assured by a local instance of Microsoft Identity Broker.
The implementation in evolution relies on sso-mib. See also the history in Gnome’s Git:
WDYT, could something similar be implemented in KMail? Or are there prerequisites missing that I cannot think of right now?
Thanks for the discussion!
Michael