Forum Discussion
Office 365 MFA Enabled Users and the Apple Mail app for iOS Concern
I know some other users have mentioned this being an issue with Modern Authentication being turned on, but we recently enabled Modern Authentication globally in the Exchange Admin center, and literally all of our problems have vanished.
Users are able to authenticate with their "normal" AD password on newer smart phones, and are able to use their App Password on older smart phones. It's like a happy little ecosystem where everything "just works" lol
JPSAndyJ I'm the IT manager for our company. We have BYOD device policy for most of the iPhone users and only certain employees on InTune. We have had numerous issues which are still ongoing. Due to repeated breakin attempts I had to enact a stricter authentication policy which blocked basic authentication. Users began reporting issues, and even before one user who had limited admin rights had issues with his device and MFA. I have a work around for the recent issues where the iPhone asks for a password using basic auth. Open another iPhone application which forces the use of modern authentication, either Teams or Outlook for iOS. This will then authenticate and the password prompt from the native mail app will go away. For the MFA user I had to remove their profile and add it back. Then use this same method to force modern authentication. Try that.
Jim_Hill that's a very good point and I'm glad you brought it up.
Modern Auth with O365 works around the premise of "authentication tokens" and I believe once a user's phone has said token, they can authenticate with virtually any aspect of the O365 platform.
So yes, authenticating with any app that requires Modern Authentication should authenticate with every O365 service on that device.
Thanks JPSAndyJ I would just have recommended the use of the Outlook for iOS app but the current app does not provide ready integration with iOS contacts, making it hard for users who want a global contact set on their phones.