Forum Discussion

PBeiler1's avatar
PBeiler1
Steel Contributor
Jul 19, 2016
Solved

MFA with Outlook 2016 on the desktop and Skype 2016

Is there a special settings for MFA to work with Outlook 2016 on the desktop and Skype 2016?  After enabling MFA for my ID, the WINDOWS SECURITY dialogue (wanting my O365 credentials) does not accept my password.  My credentials work other places so know it is not a credentials issue.

  • Diane_Poremsky_MVP's avatar
    Diane_Poremsky_MVP
    MVP
    Aug 04, 2016
    Are you using Office 365's MFA? That definitely works with Outlook 2016/Skype for Business and brings up the modern auth dialog. (I approve it using the auth app on my iPhone.)
  • Matt Ellis's avatar
    Matt Ellis
    Copper Contributor
    Jul 28, 2016
    We have managed to get around this with conditional access for MFA so that we don't nee to use App Passwords to get Exchange Online integration in Skype for Business.

    Matt
    • PBeiler1's avatar
      PBeiler1
      Steel Contributor
      Jul 28, 2016

      ...Conditional access?  Can you breifly describe?  Are you referring to Microsoft's Powershell solution, enabling  Exchange online and Skype for MFA.  I haven't done this yet but was going to test.  I'm told this will take care of it (so I don't need to do the App Password) but need to test.   

      https://support.office.com/en-gb/article/Using-Office-365-modern-authentication-with-Office-clients-776c0036-66fd-41cb-8928-5495c0f9168a?ui=en-US&rs=en-GB&ad=GB

      Details in the GETTING STARTING WITH MODERN AUTHENTICATION section. 

      • PBeiler1's avatar
        PBeiler1
        Steel Contributor
        Aug 04, 2016

        Quick Follow up ... Microsoft has a setting solution, to enable MFA for Exchange Online and Skype 2016, rather than using APP PASSWORD.  Powershell is needed to make this change. But MFA does not yet work when connecting to Exchange Online with Powershell. MFA does work for connecting to Azure AD with Powershell.

        So MFA needs to mature to the point where one can connect with Powershell. Hmmm. I want MFA turned on for admins. Then my admins will not be able to use Powershell to do their admin work.  Hope to be proven wrong soon, on using MFA and Powershell for connecting to Exchange Online.

    • Luke Franzelas's avatar
      Luke Franzelas
      Copper Contributor
      Oct 23, 2018

      I know app password isn't the only way.

      My iphone 10 mail client allows me to sign in with my password and then I get a text with an MFA code and enter that in when adding my company account.    My last company, used MFA with outlook 2016 without using app passwords.  It worked after enabling modern auth in exchange.

      I assume that because my iphone mail client doesn't require an app password that modern auth is already enabled.   So why is my outlook client that I just downloaded from O365 today requiring app passwords.  There has to be a setting.

       

      Also, is there a way to use the microsoft authenticator instead of text.   Texts don't always come through in a timely maner.

      • PBeiler1's avatar
        PBeiler1
        Steel Contributor
        Oct 23, 2018

        Your setup requires passwords.  An app-password is a valid password.  It never expires, thus not ideal.  When you are asked for the password, you either give it the never-expiring app-password, or your normal one.  In your case, when you give it the normal one, MFA kicks in.  (An App-Password replaces MFA and was a work-around for apps that did not work with MFA).  I suspect your old iPhone Mail app knows your App-Password, thus never asking for it.  

         

        You can setup more verification methods (authenticator, etc).  Go to … https://MyApps.Microsoft.com,  click on your photo, go to profile, go to Additional Security Verification.  

Resources