Disable Legacy Authentication

%3CLINGO-SUB%20id%3D%22lingo-sub-1739804%22%20slang%3D%22en-US%22%3EDisable%20Legacy%20Authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1739804%22%20slang%3D%22en-US%22%3E%3CP%3ETrying%20to%20get%20my%20head%20around%20this%20task%20%E2%80%9CDisable%20legacy%20authentication%E2%80%9D%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELooked%20in%20AAD%20sign-ins%20(and%20in%20the%20legacy%20Workbook)%20and%20there%E2%80%99s%20a%20lot%20of%20user%20sign-in%20with%20legacy%20auth.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3EBut%20I%20do%20not%20understand%20some%20of%20these%20e.g.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EUser%20G%20-%20uses%20a%20browser%20(seen%20in%20the%20legacy%20workbook)%20-%20when%20looking%20under%20the%20device%20info%20the%20user%20is%20running%20Windows%2010%20and%20browser%20is%20Chrome%2085.0.4.4183%3CBR%20%2F%3E%E2%80%93%20why%20is%20this%20reported%20as%20legacy%20auth.%3F%20%26nbsp%3B%26nbsp%3B%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EUser%20T%20%E2%80%93%20under%20Sign-ins%20the%20%E2%80%98%3CSTRONG%3EClient%20app%E2%80%99%3C%2FSTRONG%3E%20column%20report%20this%20as%20%E2%80%9C%3CSTRONG%3EOther%20clients%3C%2FSTRONG%3E%E2%80%9D%20and%20the%20Application%20is%20%3CSTRONG%3E'Skype%20for%20business%20Online%3C%2FSTRONG%3E%20'-%20looking%20into%20%3CSTRONG%3Edevice%20info%3C%2FSTRONG%3E%20there%E2%80%99s%20seen%20%E2%80%98Windows%2010%E2%80%99%20and%20lync.exe%3CBR%20%2F%3EDoes%20Lync%20not%20support%20Modern%20Auth.%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLI%3E%3CLI%3EUser%20O%20%E2%80%93%20the%20%E2%80%98%3CSTRONG%3EClient%20app%3C%2FSTRONG%3E%E2%80%99%20report%20%E2%80%98%3CSTRONG%3EExchange%20ActiveSync%3C%2FSTRONG%3E%E2%80%99%20%E2%80%93%20looking%20into%20%E2%80%98%3CSTRONG%3Edevice%20info%3C%2FSTRONG%3E%E2%80%99%20seeing%20'%3CSTRONG%3EiOS%3C%2FSTRONG%3E'%20and%20browser%20used%20are%20%E2%80%98%3CSTRONG%3EMobile%20Safari%3C%2FSTRONG%3E%E2%80%99%3CBR%20%2F%3EIf%20I%20disable%20%E2%80%98Exchange%20ActiveSync%E2%80%99%26nbsp%3B%20will%20all%20the%20iOS%20devices%20then%20start%20using%20Modern%20auth.%20automatic%20or%20do%20all%20the%20end%20users%20have%20to%20do%20something%3F%3C%2FLI%3E%3C%2FUL%3E%3CP%3Epowershell%20%E2%80%98Get-OrganizationConfig%20%7C%20Format-Table%20Name%2COAuth*%20-Auto'%20%E2%80%93%20returns%20True%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20over%20%2B200000k%20Sign%E2%80%99ins%20that%20use%20Legacy%20auth.%20How%20to%20one%20continue%20getting%20these%20legacy%20protocols%20disabled%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1739804%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAccess%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Super Contributor

Trying to get my head around this task “Disable legacy authentication” 

 

Looked in AAD sign-ins (and in the legacy Workbook) and there’s a lot of user sign-in with legacy auth.

But I do not understand some of these e.g.

 

  • User G - uses a browser (seen in the legacy workbook) - when looking under the device info the user is running Windows 10 and browser is Chrome 85.0.4.4183
    – why is this reported as legacy auth.?   

 

  • User T – under Sign-ins the ‘Client app’ column report this as “Other clients” and the Application is 'Skype for business Online '- looking into device info there’s seen ‘Windows 10’ and lync.exe
    Does Lync not support Modern Auth.?

  • User O – the ‘Client app’ report ‘Exchange ActiveSync’ – looking into ‘device info’ seeing 'iOS' and browser used are ‘Mobile Safari
    If I disable ‘Exchange ActiveSync’  will all the iOS devices then start using Modern auth. automatic or do all the end users have to do something?

powershell ‘Get-OrganizationConfig | Format-Table Name,OAuth* -Auto' – returns True

 

With over +200000k Sign’ins that use Legacy auth. How to one continue getting these legacy protocols disabled?

0 Replies