Forum Discussion

Tomas_S_'s avatar
Tomas_S_
Copper Contributor
Mar 30, 2023
Solved

Allow access to basic authentication protocols

I have disabled the basic/legacy authentication methods from M365 admin center. If I run this command Get-OrganizationConfig | Select-Object -ExpandProperty DefaultAuthenticationPolicy | ForEach {...
  • The UI in Admin Center doesn't set the policies for those protocols. You can only set those with PowerShell, and I'd suggest you do it. Just modify the parameters in your default auth policy and block them.

    When we block basic auth at the tenant level, we don't use Auth Policies, so a protocol can be blocked, even if the Auth Policy says it's enabled.

    For the two you call out, RWS and OutlookService - we're going to block those too in the coming weeks and months.

Resources