Outlook sign-in issue with Intune on Windows 10

[Johannes von Scheidt]

Hey everyone,

i just discovered the following issue:

1. Added my Windows 10 1803 machine to Intune MDM from my Azure/Office 365 tenant.

2. Logged into the machine with my Office 365 account.

3. Installed Outlook (16.0.9126.2152) 

4. Tried to setup my Office 365 account (same as Intune)

5. The account setup fails because Outlook uses the Windows log-in prompt for authentication against O365 and not the required Browser-prompt with MFA.

Any ideas?

I have setup app passwords as a preliminary measure, but I don't think this is the intentional experience.

[#2 · Accepted solution]

Hi Johannes,

Did you enable Modern Autjentication on Exchange Online? This is needed if your using Outlook in combination with MFA.

You can check this bu running the following command in Echange online Powershell:

Get-OrganizationConfig | fl OAuth2ClientProfileEnabled

If the outcome of the command is false, you can set it to true with the following command:

Set-OrganizationConfig -OAuth2ClientProfileEnabled $true

Best regards,

Ruud Gijsbers

[#3]

Hi,

i just checked and yes Modern auth is enabled. Account setup works in the expected fashion on another machine that is not part of Intune MDM and I can setup an account from a different O365 tenant with MFA without a problem.

Greetings
Johannes

[#4]

I also tried this setting, but Outlook doesn't seem to care in this case: https://support.microsoft.com/en-us/help/3126599/outlook-prompts-for-password-when-modern-authentica...

[#5]

Is there any Conditional Access policy in place? Or maybe an application protection policy?

Best regards,
Ruud Gijsbers

[#6]

Windows 10 with Office 2016/365 leverage modern authentication and doesn't require to have an app password for authentication. I assume you're getting a pop up message as you're trying to setup outlook profile from outlook startup window, can you try to configure email profile from Control panel > Mail, New Profile option?

[#7]

I just disabled and enabled Modern auth and now its working. Strange things... Thanks for your support!