Forum Discussion
Skype iOS client and MFA Supportability
Problem: Skype for Business for iOS mobile client cannot sign into Skype for Business *Online* after enabling MFA.
ADAL was enabled 2 days ago (1/17/17) in the Office 365 tenant
Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed
( I also enabled ADAL for Exchange Online with this command:
Set-OrganizationConfig -OAuth2ClientProfileEnabled $true)
Reference 1: https://support.office.com/en-us/article/Enable-Exchange-Online-for-modern-authentication-58018196-f918-49cd-8238-56f57f38d662
Reference 2: https://aka.ms/SkypeModernAuth
The work-around is to use MFA App Passwords, however, we shouldn't have to do that since the documentation states that the Skype for Business PC client is supposed to work because according to these two articles:
https://blogs.office.com/2015/11/19/updated-office-365-modern-authentication-public-preview/
And th https://support.microsoft.com/en-us/kb/3126604
17 Replies
- DeletedHi Joe Stocker:
See https://support.microsoft.com/en-us/help/3126604/skype-for-business-mobile-users-can-t-sign-in-when-modern-authentication-is-enabled
It will explain a lot :)
Greetings,
Erdem- Joe StockerBronze Contributor
Yes, that is the same article that I quoted at the bottom of my question but I referred to it as https://support.microsoft.com/en-us/kb/3126604 (but it links to the same place your URL points to).
According to that article, The iOS mobile client for Skype for Business should be compatible with MFA but instead it requires me to put in an App Password.
- JonasBackIron Contributor
Joe Stocker, I had the same problem as you after enabling MFA on my user and enabling Modern Authentication on SfB Online + Exchange Online (IOS app right now 6.11.1.310). I agree with you, according to the KB3126604 , it's quite clear that if you're a pure online Office 365 tenant, MFA should work on IOS and Android.
For me, the problem was that I had played around with the app settings. On the logon screen, check Advanced Options before signing in - I had a different old User Name entered there at the top.