This setting is intended to be used when there is a single service account for Office 365 and on-premise Exchange. When the service account does not work for Office 365, BEMS does not have the location of the mailbox, so credentials can't be used.
More...
