Forum Discussion
Surface Hub 2 - Problem with Microsoft Teams
Hello everyone,
Issue has been mitigated. Please test and confirm
Thank you,
Cezar
- cezarcretuJan 14, 2020
Microsoft
This issue is now confirmed as resolved. Your issue might be related to something else like conditional access, account configuration, network and so on. I suggest opening a case if you are still having issues
Thank you
Cezar
- alankinane485Jan 14, 2020Copper ContributorHi Cezar,
It looks like the Teams for SurfaceHub app does not support modern authentication. Mine has stopped working again. I had originally excluded the account from MFA whilst setting up my Surface Hub but now that I've enabled MFA on the account it is not working again. Seems to work again once I exclude the account and restart the surface hub.
We are contractually obliged by Microsoft to have all of our tenant accounts protected by MFA so we are completely stuck now. We can use the browser based version of Teams as a workaround but this not a great experience for the users to have to do this.
These two threads explain the situation so it seems Microsoft is aware of this but still has no solution.
https://www.microsoftpartnercommunity.com/t5/Multi-Factor-Authentication-MFA/The-new-MFA-for-Partners-requirements-what-will-that-do-to-our/td-p/11161/page/2
https://www.microsoftpartnercommunity.com/t5/Multi-Factor-Authentication-MFA/Microsoft-Surface-Hub-and-MFA-Security-Defaults/td-p/14714- Tristan GriffithsJan 15, 2020Brass Contributor
alankinane485 Exclude device account from Conditional Access policies. Add corporate IP address to "old" MFA trust list. Set device account MFA to Enabled. Enrol device account to MFA on sign in from another PC so that the account changes to "Enforced".
Unless we're totally thinking about this the wrong way, we believe this fulfils the "MFA for all" even if MFA is bypassed for your corporate IP. Could also use an app password with "old" MFA but we haven't found this to be required.