SOLVED

Pop up for credentials

%3CLINGO-SUB%20id%3D%22lingo-sub-192545%22%20slang%3D%22en-US%22%3EPop%20up%20for%20credentials%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-192545%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20experts%3C%2FP%3E%3CP%3Ewhen%20users%20change%20their%20password.%20prompt%20for%20change%20of%20credentials%20in%20outlook%20dont%20happen%20immediately%2C%20it%20happens%20after%20some%20time%2C%20u%20can%20say%20min%20after%2015%20minutes%20or%20so%2C%20many%20users%20are%20complaining.%20plz%20guide%20me%20to%20troubleshoot%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-192545%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-195908%22%20slang%3D%22en-US%22%3ERe%3A%20Pop%20up%20for%20credentials%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-195908%22%20slang%3D%22en-US%22%3EThe%20last%20two%20items%20are%20irrelevant%20to%20the%20first%20two.%20Since%20you%20can%20turn%20on%20two%20factor%20and%20modern%20auth.%20on%20either.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAAD%20connect%20is%20much%20easier%20to%20setup%20and%20works%20very%20well%20in%20my%20experience.%20Doing%20ADFS%20requires%20a%20lot%20of%20planning%2C%20servers%20with%20adfs%20services%20setup%20redundant%20etc.%20etc.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-195905%22%20slang%3D%22en-US%22%3ERe%3A%20Pop%20up%20for%20credentials%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-195905%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20i%20need%20to%20go%20with%20below%20solutions%20which%20is%20the%20best%20solution%3C%2FP%3E%3CP%3EADFS%20configured%20with%20O365%2C%26nbsp%3B%3C%2FP%3E%3CP%3Eor%3C%2FP%3E%3CP%3EAAD%20connect%20SSO%2C%26nbsp%3B%3C%2FP%3E%3CP%3Eor%3C%2FP%3E%3CP%3Etwo%20factor%20authentication%20(I%20am%20not%20sure)%3C%2FP%3E%3CP%3Eor%3C%2FP%3E%3CP%3Emodern%20authentication(is%20modern%20authentication%20enabled%20by%20default)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-195897%22%20slang%3D%22en-US%22%3ERe%3A%20Pop%20up%20for%20credentials%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-195897%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22http%3A%2F%2Fpctechgo.blogspot.com%2F2014%2F03%2Factive-directory-intersite-replication.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fpctechgo.blogspot.com%2F2014%2F03%2Factive-directory-intersite-replication.html%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-195894%22%20slang%3D%22en-US%22%3ERe%3A%20Pop%20up%20for%20credentials%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-195894%22%20slang%3D%22en-US%22%3E%3CP%3Ecan%20you%20plz%20share%20me%20the%20document%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-192563%22%20slang%3D%22en-US%22%3ERe%3A%20Pop%20up%20for%20credentials%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-192563%22%20slang%3D%22en-US%22%3EDo%20you%20have%20separate%20AD%20sites%3F%20When%20I%20had%20this%20issue%20it's%20because%20you%20change%20your%20passwords%20in%20local%20AD%2C%20and%20you%20have%20your%20Azure%20Sync%20setup%20in%20a%20colo%20or%20another%20site.%20It%20by%20default%20takes%20roughly%2015%20minutes%20for%20that%20AD%20replication%20to%20happen%2C%20then%20another%20min%20or%20so%20for%20Azure%20AD%20Sync%20to%20ship%20to%20Office%20365.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20this%20is%20the%20case%2C%20then%20let%20me%20know%20and%20I%20can%20find%20article%20on%20how%20you%20can%20decrease%20the%20AD%20Site%20replication%20time%20to%20accommodate%2C%20assuming%20bandwidth%20isn't%20an%20issue%20and%20you%20can%20do%20this.%20Otherwise%20you%20might%20need%20to%20look%20at%20moving%20your%20Azure%20AD%20to%20the%20site%20your%20users%20change%20passwords.%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

Hi experts

when users change their password. prompt for change of credentials in outlook dont happen immediately, it happens after some time, u can say min after 15 minutes or so, many users are complaining. plz guide me to troubleshoot

5 Replies
Highlighted
Do you have separate AD sites? When I had this issue it's because you change your passwords in local AD, and you have your Azure Sync setup in a colo or another site. It by default takes roughly 15 minutes for that AD replication to happen, then another min or so for Azure AD Sync to ship to Office 365.

If this is the case, then let me know and I can find article on how you can decrease the AD Site replication time to accommodate, assuming bandwidth isn't an issue and you can do this. Otherwise you might need to look at moving your Azure AD to the site your users change passwords.
Highlighted

can you plz share me the document

Highlighted
Highlighted

If i need to go with below solutions which is the best solution

ADFS configured with O365, 

or

AAD connect SSO, 

or

two factor authentication (I am not sure)

or

modern authentication(is modern authentication enabled by default)

Highlighted
Solution
The last two items are irrelevant to the first two. Since you can turn on two factor and modern auth. on either.


AAD connect is much easier to setup and works very well in my experience. Doing ADFS requires a lot of planning, servers with adfs services setup redundant etc. etc.