Forum Discussion

Matt McNabb's avatar
Matt McNabb
Iron Contributor
Apr 07, 2017
Solved

Risks when enabling ADAL for Exchange Online and Skype

I'm considering enabling ADAL/Oauth for our Office 365 tenant to begin working with MFA, and am using the information in this wiki: https://social.technet.microsoft.com/wiki/contents/articles/36101....
Authentication
  • VasilMichev's avatar
    VasilMichev
    Apr 09, 2017

    You are simply enabling another auth provider, it is not directly tied to MFA. As long as the client supports ADAL/Modern auth, it will follow the new auth process (with or without MFA), and if it does not support it, it will use the legacy method. Apart from some of the PowerShell modules and sme 3rd party apps, all apps should have proper support for Modern auth now.

Ryan McIver's avatar
Ryan McIver
Copper Contributor
Oct 19, 2017

Very helpful info Ryan, thank you.  Question for you.

 

# iOS 11.01 native mail app does support ADAL but S7 Samsung does not 

 

For the S7 scenario, does this apply to all users, or only users with MFA enabled?  We have BYOD users with mobile devices that are all over the place version-wise, and I'm curious to know if we flip the switch on this, will these users lose access even if they aren't using MFA?

 

Thanks

Ryan Degner's avatar
Ryan Degner
Copper Contributor
Oct 24, 2017

sorry for the delay.

 

My experience has been only users that have MFA enabled are affected. 

  • Ryan McIver's avatar
    Ryan McIver
    Copper Contributor
    Oct 24, 2017
    My testing is showing the same, thanks!

Resources