Forum Discussion

Jesper Stein's avatar
Jesper Stein
Brass Contributor
Oct 20, 2016

MFA and Powershell

Hi. I am testing MFA on some admin users. I have given the MFA admins a EMS licens so whitelisting of IPs is supported.   So I have whitelisted our office IP, and when my admin go to https://outlo...
office 365
  • Brandon Koeller's avatar
    Brandon Koeller
    Oct 24, 2016

    Hey Everyone,

    Thanks for your continued engagement. The MFA Powershell team says I can share the link with  y'all: http://aka.ms/exopspreview

    Do let us know if you have feedback.

    Thanks!

    Brandon Koeller

Andrew Hackett's avatar
Andrew Hackett
Copper Contributor
Jan 05, 2017

Hi Jesper,

 

Not sure if this is still an issue for you, but we've been able to get this working for our Admins (note that for this to work the admin account needs to be cloud only, federated accounts will not work).

 

You've already done the IP whitelisting which is good, the missing piece (for us) was to delete the default app password that get's created when you enable MFA on the admin account.

 

Follow the below steps to delete the default app password:

  • Enable MFA on your cloud admin account
  • Go to this link: https://portal.office.com/account/#security
  • Click on Additional Security Verification
  • Click on Update my phone numbers used for account security
  • Click on the app passwords tab
  • Delete the default app password that was created

Try connecting to Office 365 services via Powershell.

 

Resources