I think it may be necessary to set up an App password in the Microsoft o365 settings, specifically for use by the website form.
There is a discussion about the issue in relation to phpMailer here:
https://stackoverflow.com/questions/24947434/setting-up-phpmailer-with-office365-smtp