Forum Discussion

PBeiler1's avatar
PBeiler1
Iron Contributor
Jul 19, 2016
Solved

MFA with Outlook 2016 on the desktop and Skype 2016

Is there a special settings for MFA to work with Outlook 2016 on the desktop and Skype 2016?  After enabling MFA for my ID, the WINDOWS SECURITY dialogue (wanting my O365 credentials) does not accept...
Luke Franzelas's avatar
Luke Franzelas
Copper Contributor
Oct 23, 2018

I know app password isn't the only way.

My iphone 10 mail client allows me to sign in with my password and then I get a text with an MFA code and enter that in when adding my company account.    My last company, used MFA with outlook 2016 without using app passwords.  It worked after enabling modern auth in exchange.

I assume that because my iphone mail client doesn't require an app password that modern auth is already enabled.   So why is my outlook client that I just downloaded from O365 today requiring app passwords.  There has to be a setting.

 

Also, is there a way to use the microsoft authenticator instead of text.   Texts don't always come through in a timely maner.

  • PBeiler1's avatar
    PBeiler1
    Iron Contributor
    Oct 23, 2018

    Your setup requires passwords.  An app-password is a valid password.  It never expires, thus not ideal.  When you are asked for the password, you either give it the never-expiring app-password, or your normal one.  In your case, when you give it the normal one, MFA kicks in.  (An App-Password replaces MFA and was a work-around for apps that did not work with MFA).  I suspect your old iPhone Mail app knows your App-Password, thus never asking for it.  

     

    You can setup more verification methods (authenticator, etc).  Go to … https://MyApps.Microsoft.com,  click on your photo, go to profile, go to Additional Security Verification.  

    • Mukesh's avatar
      Mukesh
      Copper Contributor
      Dec 02, 2018

      PBeiler1

      In order to use MFA with Skype For Business, We need to enable modern authentication for Skype for Business Online.
      https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx

       

      Steps to enable modern authentication for Skype for Business Online
      https://aka.ms/SkypePowerShell

      Check the current status of ClientAdalAuthOverride attribute.
      Get-CsOAuthConfiguration | FL *ClientAdalAuthOverride*

      Now run the following command to enable modern authentication for Skype for Business Online.
      Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed

      Verify that the change was successful by running the following:
      Get-CsOAuthConfiguration


      Post making the PowerShell changes it may take 15 minutes to couple of hours for the changes to take affect.

      Ref Link
      https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx
      https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/modern-authentication/topologies-supported
      https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/enable-or-disable-modern-authentication-in-exchange-online
      https://social.technet.microsoft.com/wiki/contents/articles/32211.modern-authentication-behavior-across-office-2013-and-office-2016.aspx

      Regards
      Mukesh Rawat

Resources