Forum Discussion

Chris Johnston's avatar
Chris Johnston
Brass Contributor
May 08, 2019
Solved

Azure Automation connecting to Exchange with MFA enforced

I have a tenant with MFA a requirement for any account with elevated privileges. I can use Azure Automation PowerShell runbook for Azure AD using the service principal and certificate e.g. # Get ...
azure
  • MichaelMardahl's avatar
    MichaelMardahl
    Oct 08, 2019

    Chris Johnston The answer is deceptively simple....

     

    I published a Runbook script to get you started with the initial connection, then you can add your own script form there on.

    https://www.powershellgallery.com/packages/AzureAutomationAgainstExchangeOnlineWithMFAEnabledAccount/1.0.0

     

     

MichaelMardahl's avatar
MichaelMardahl
Copper Contributor
Oct 12, 2019

Hi Craig. 


The example runbook in the PS gallery I have linked to, works just fine without a hybrid worker.
No exclusions, or trusted site lists, with full enforced MFA for priv. accounts.

It uses a module called exchangeOnlineShell which works like the one you are linking to, but without requiring the installation, which is a problem in azure automation, and yes, that would require a hybrid worker as you say.

 

I am sure we will soon see some solutions from microsoft for authenticating with certificates against Exchange Online... (Fingers crossed)

Magnus Tengmo's avatar
Magnus Tengmo
Copper Contributor
Nov 13, 2019

Microsoft have released a complete new module for Exchange with support for modern authentication alot of other improvements. 

 

https://docs.microsoft.com/en-us/powershell/exchange/exchange-online/exchange-online-powershell-v2/exchange-online-powershell-v2?view=exchange-ps

 

Resources