Forum Discussion
New user Outlook profile with MFA enabled
Greetings,
I am not sure if anyone else has started to see this behavior or not, but we recently noticed the following when setting up new user Outlook profiles when imaging their laptops.
During our provisioning process new user accounts are created in AD and they are also enabled for MFA. When our support team goes to setup the new users Outlook profile a dialogue box pops up requiring the 2-step verification information to be filled out. If they cancel out of this then Outlook cannot be configured. This started happening last week and the info cannot be filled out since we do not have the new users contact info yet nor their mobile device.
My question is does anyone know about this and if there is a way around it? The IP address is in the trusted IP list to bypass MFA. We are running Office 2016 and modern auth is enabled. If this is the behavior going forward and cannot be changed then we would need to change up our procedures which isn't ideal.
Any help would be appreciated.
4 Replies
Have the user actually configured their MFA details? My guess is that the prompt might be simply the enrollment process being triggered.
So the issue with that is the user has not physically started with the company yet. We provision accounts and equipment before hand after all paperwork has been approved so that everything is ready for them when they come in for day 1. We do not have their mobile devices as some departments are BYOD. Corporate issues mobile phones are issued after the user has started.
I would love to see how other companies are setting up MFA for new users, because in our environment it's a pain.
Hi Derek,
You can setup everything without MFA and after the setup has been completed Enable MFA for the user.
Hi Derek,
Has VasilMichev said, you may need to inform your users to setup MFA before the configuration.
You can send them to this link to register for multi-factor auth: https://aka.ms/MFASetup before the setup of Outlook profiles.
