New tools to block legacy authentication in your organization

Hi Daniel Nitz, thanks for reading and I'm happy to address your comments to the blog post. 

The aggregated report shows all legacy auth protocols used, including Exchange ActiveSync, but a protocol does not get listed if there are no sign-ins of that type. Since there were no sign-ins using Exchange ActiveSync in the time range specified (14 days), Exchange ActiveSync does not appear in the Sign-ins using Legacy Auth workbook. 

The screenshot in Step 1 is filtered to include 14 client apps. You can see whether a filter is applied where it says Client app: 14 selected. 

As the blog mentions, there are two ways you can block legacy authentication. The first way is via Conditional Access, and the second way (which you mention in your comment) is to disable the protocol at the service level. 

Thanks,

Daniel Wood