Two factor for MSP's

%3CLINGO-SUB%20id%3D%22lingo-sub-503033%22%20slang%3D%22en-US%22%3ETwo%20factor%20for%20MSP's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-503033%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20an%20MSP%20looking%20after%20a%20varity%20of%20O365%20clients.%20We%20would%20like%20to%20activate%20Two%20Factor%20for%20our%20own%20admin%20accounts%20for%20our%20clients%2C%20but%20as%20we%20have%2010%20engineers%20logging%20in%20to%20these%20accounts%20we%20cannot%20think%20of%20a%20way%20of%20managing%20it.%20How%20does%20everyone%20else%20do%20this%3F%20We%20are%20a%20MS%20partner%20and%20have%20our%20customers%20accounts%20under%20our%20partner%20access%2C%20but%20we%20still%20need%20to%20occasionally%20access%20their%20portals.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-503033%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-503063%22%20slang%3D%22en-US%22%3ERe%3A%20Two%20factor%20for%20MSP's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-503063%22%20slang%3D%22en-US%22%3EUse%20365%20MFA%20for%20the%20accounts%20-%20set%20them%20to%20use%20app%20code%20(rather%20than%20notification)%20-%20you%20can%20have%20multiple%20devices%20authenticator%20apps%20setup%20for%20a%20single%20user%20account.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-503110%22%20slang%3D%22en-US%22%3ERE%3A%20Two%20factor%20for%20MSP's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-503110%22%20slang%3D%22en-US%22%3EThanks%2C%20Yeah%2C%20i%20had%20thought%20of%20that%2C%20juist%20a%20pain%20updating%2010%20engineers%20phones%20with%2040%20customers%20office%20365%20accounts....%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-503161%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Two%20factor%20for%20MSP's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-503161%22%20slang%3D%22en-US%22%3EAgreed.%20I%20assume%20the%20engineers%20could%20be%20remote%2C%20so%20using%20the%20'phone%20call'%20option%20with%20an%20office%20desk%20phone%20wouldn't%20work%20either%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-503168%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Two%20factor%20for%20MSP's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-503168%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F506%22%20target%3D%22_blank%22%3E%40Rob%20Ellis%3C%2FA%3EExactly%2C%20i%20wanted%20to%20use%20email%2C%20creating%20a%20dist%20group%20with%20all%20the%20engineers%20in%20it%2C%20but%20O365%20does%20not%20support%20that.%20Back%20to%20the%20drawing%20board....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-503180%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Two%20factor%20for%20MSP's%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-503180%22%20slang%3D%22en-US%22%3EWhat%20about%20SMS%20message%2C%20sent%20to%20a%20distribution%20group%20(would%20need%20a%203rd%20party%20service%2C%20I%20think)%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi,

 

We are an MSP looking after a varity of O365 clients. We would like to activate Two Factor for our own admin accounts for our clients, but as we have 10 engineers logging in to these accounts we cannot think of a way of managing it. How does everyone else do this? We are a MS partner and have our customers accounts under our partner access, but we still need to occasionally access their portals.

5 Replies
Highlighted
Use 365 MFA for the accounts - set them to use app code (rather than notification) - you can have multiple devices authenticator apps setup for a single user account.
Highlighted
Thanks, Yeah, i had thought of that, juist a pain updating 10 engineers phones with 40 customers office 365 accounts....
Highlighted
Agreed. I assume the engineers could be remote, so using the 'phone call' option with an office desk phone wouldn't work either?
Highlighted

@Rob EllisExactly, i wanted to use email, creating a dist group with all the engineers in it, but O365 does not support that. Back to the drawing board....

Highlighted
What about SMS message, sent to a distribution group (would need a 3rd party service, I think)