After looking on other forums the reason may be that EWS doesn't support NTLM authentication on cloud but only on prem. I'm still not 100% sure this is the reason why but I'm going to procede by creating a service principal anyway.
Thank you