Forum Discussion

mrizzi2's avatar
mrizzi2
Copper Contributor
Nov 19, 2021

Is it possible to achieve a more secure user authentication and authorization with on-prem Exch ?

Hello experts,   consider a scenario where medium sized companies are still running a supported version of Exchange 2013 or newer On-Prem and for whatever reason are reluctant to commit to Office 3...
Exchange Server
hybrid
surajbudhani's avatar
surajbudhani
Icon for Microsoft rankMicrosoft
Nov 25, 2021

mrizzi2 

 

The best way to go forward with this is HMA.

You can use a combination of conditional access and Intune to add extra layer of protection for the user sign in attempts to your organization.

Modern authentication is an umbrella term for a combination of authentication and authorization methods between a client (for example, your laptop or your phone) and a server, as well as some security measures that rely on access policies that you may already be familiar with. It includes:


Authentication methods: Multi-factor authentication (MFA); smart card authentication; client certificate-based authentication

Authorization methods: Microsoft's implementation of Open Authorization (OAuth)

Conditional access policies: Mobile Application Management (MAM) and Azure Active Directory (Azure AD) Conditional Access

I am adding a few URL hope they help you:

https://docs.microsoft.com/en-us/Exchange/clients/outlook-for-ios-and-android/use-hybrid-modern-auth?view=exchserver-2019

https://docs.microsoft.com/en-us/mem/intune/protect/conditional-access-exchange-create

https://docs.microsoft.com/en-us/microsoft-365/enterprise/hybrid-modern-auth-overview?view=o365-worldwide