Forum Discussion

Anonymous's avatar
Anonymous
Mar 14, 2019
Solved

Is MFA included in Office 365 Exchange Online Plan 1?

I'm having a hard time finding out whether or not MFA functionality is included in O365 Exchange Online P1 for users logging in to the e-mail environment.   If anybody knows, I'd also like to know ...
Authentication
exchange
office 365
security
  • Cian Allner's avatar
    Cian Allner
    Mar 15, 2019

    I thought that too, I am reasonable sure though at this point that plan does include MFA but you might have to contact Microsoft directly somehow to get a definitive answer. From the product page there is a contact us option, in the UK at least, either via phone or with a form, or you could try asking via support perhaps if you already have Office 365.

ChristianBergstrom's avatar
ChristianBergstrom
Silver Contributor
May 29, 2020

glenmcleroy Thanks for your feedback Glen! As I'm not a "license guy" I sent my question to Microsoft and that was the response I got. I have to say I wasn't particular happy with the answer as I requested information how one could use EXO without being authenticated by AAD (as Brian Reid highlighted as well). No response... just "AAD not included". But then again, the Premier support keeps on disappointing me.

Brian Reid's avatar
Brian Reid
MVP
May 29, 2020
If that's the answer you got then they are wrong. Azure AD is the directory for Exchange Online, so you cannot have EXO without AAD. You can use PTA or ADFS or 3rd party federation service to authenticate EXO and the rest of M365 but you really need good reasons for this, and not being sure of what the product contains is not a good reason. MFA is included in AAD Free and you should turn on the combined registration wizard for MFA as well and get a better and newer experience that the picture posted above which is the old experience. If you are looking for guidance and help in the direction of what to do, how and why around this and the rest of M365 then get in touch, we help businesses all over the world navigate Microsoft 365
  • SergeyC's avatar
    SergeyC
    Copper Contributor
    Jun 10, 2020

    Brian ReidThanks for your previous answers. One of our customers currently is planning to migrate from Exchange on-premises to Exchange Online Plan 1 (EXO P1). EXO service comes with SLA. Microsoft publishes SLA for all Online Services https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=37. I was wondering if you could clarify the following questions:

    1. What https://azure.microsoft.com/en-us/pricing/details/active-directory/ will customer get after buying EXO P1: AAD FREE or OFFICE 365 APPS?

    2.  If the answer on first question is AAD FREE, how it correlates with the circumstance that Azure AD comes with no SLA? So it turns out the SLA regulated service depends on service with no SLA?

    • Brian Reid's avatar
      Brian Reid
      MVP
      Jun 11, 2020
      SergeyC - Azure AD Free, and even if EXO has an SLA, AAD Free does not. They are different products and if you buy EXO you are not buying AAD Free, you just get it included.
    • ChristianBergstrom's avatar
      ChristianBergstrom
      Silver Contributor
      Jun 10, 2020
      Hey, thanks for the reply to the topic! I later on stumbled across this page which explained things better (for me at least).

      https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing
      • cmessina85's avatar
        cmessina85
        Copper Contributor
        Jun 11, 2020
        Hey all,

        I am currently trying to get clarification from Microsoft on:
        1. Which Office/Microsoft 365 plans include the "Office 365 Apps" Azure AD tier. Depending on which Microsoft KB article I'm looking at, it says it either is included with E3 and E5 only, or E1 and up.

        2. Does this Office 365 Apps tier grant users the right to use the per-user MFA (As opposed to just Security Defaults which I'm trying to avoid). Again, not clear and several articles touch on this but conflict and are not explicit.

        3. What is the future of per-user MFA? Everywhere per-user is documented, it's referenced that it's not recommended and to use either Security Defaults or pay for P1/P2 and use Conditional Access. It sounds like they are planning to phase per user out but there has been no official word about that.
  • ChristianBergstrom's avatar
    ChristianBergstrom
    Silver Contributor
    May 29, 2020

    Brian Reid Exactly! Thanks Brian. Imagine my frustration with "Premier support" questioning the same things you're explaining and not getting a proper response, nor being escalated to someone who actually knows what they are talking about. The reason I posted here is that I wanted to share what I got as a response to the topic. I am not about to use EXO plan 1.

     

    Have a great weekend. Cheers!