Nested App Authentication (NAA) token to protect middle-tier server
I'm working on an outlook addin and want to use the NAA accesstoken to validate the user on an api running on a php webserver. The addin runs as a taskepane (created with yo office) with the app only manifest. I have setup NAA to do Microsoft graph calls on behalf of the user. I have used this guid to setup NAA (copy/past) https://learn.microsoft.com/en-us/office/dev/add-ins/develop/enable-nested-app-authentication-in-your-add-in I have setup a php server (not in Microsoft infrastruktur) for a simple API, that handlers MySQL calls and app only calls to Microsoft graph. The php api authenticate itself with a client secret from the Azure app registration. Both are working as expected. Can i use the accesstoken from the NAA, to authenticate the user on the php server? If it can be done how do I validate the token?User with hundreds of Interactive Sign-In log entries that are "Interrupted"
I have one user in our organization that has hundreds of Interactive Sign-in logs in EntraID that are marked as "Interrupted". I don't even know where to start with the user. Does anyone have a recommendation for isolating the cause of these logs? Recent entries are 95% related to Office Online Core SSO application.
Authenticator app not working on new phone - old phone with app is gone
Hello Tech Community, I have trouble with my email (hotmail) account. About 12 months ago I downloaded and activated the authenticator app after having hackers trying to enter my hotmail account. A few months ago I changed my phone and I have never been asked for second factor authentication until today (so I did not pay much attention to it as I could see it. The phone number attached is old and have no access to it and that device is long gone too). BIG PROBLEM! I have the app on my new phone but it is not linked to my account (and cannot do a Cloud Recovery). If I try to do anything with my account (forward emails or change anything) it asks me for the authenticator approval/code (that I do not have access to). I am scared about doing something that will log me out of my email (which I still have access to) but cannot make any changes nor log out. Please help. Can I deactivate the authenticator app somehow? or re-set it-up to work again? Can I migrate all my emails to a new account so I do not lose years of information if I get logged out? Can I set the forwarding emails option without having to pass by second facto authentication? Looking forward to hearing from you wise community, Thank youIntune - disable Windows Hello
I have a goal: 1. Disable Windows Hello for Business without impacting current users on EntraID via Intune, 2. Configure password sync on the Okta site and Entra ID and MDM device What could be the way to disable PIN (for onboarded devices) and switch only to a password on endpoints? the password must be synchronized with Okta in both directions. Thank you,
Teams login keeps using old organization SSO (classic, Mac)
I’m running Teams classic on my Mac (because there doesn’t seem to be a personal use version of the new Teams). I used to use it with my prior job, now I want to use a personal credential. However, it keeps popping up a SSO (single sign-on) modal to authenticate with my prior organization, where I no longer work. There is no way to cancel or use an alternative, personal credential. Trying to close the modal does nor resolve the issue. What the heck? How do I tell Teams classic (Mac) to stop using SSO from the old org?
Issues with MS Office Logging me out of documents shared via Sharepoint on Mac
I work in D365 on a Mac and have since 2007. I do a lot of collaborative work in Microsoft office and until around April of this year, it has always worked perfectly. But for the past 6 months, I have been getting randomly logged out of Word, Excel and PowerPoint while actively working in a document. I am then unable to log back in and have to quite all MS applications, open up KeyChain in Spotlight and delete all items under login associated with Exchange, Office and ADAL... This only happens when working in a document via Sharepoint, and seemingly every 20 min or so. This makes collaborative work in Sharepoint now impossible. I cannot keep closing everything down and clearing the cache of logins in KeyChain. What happened and how do I fix this permanently?
Credential prompt when adding additional mailbox in Outlook
Hi, We have Azure AD Connect configured to sync user from AD to AAD. AD FS is in place to handle SSO for the managed domains in Office 365. Users run Windows 10 1809 and Outlook 365 1902. When a user logon to his/her computer and start Outlook for the first time Outlook detects the users email and the user can just click Connect and continue trough the wizard in Outlook to add his/her mailbox. During this process the user is never prompted to enter their password. If the user decide to add a second mailbox (File -> Add Account) in Outlook they enter the email address of the additional mailbox and click Connect. What happens then is they are presented with window where our AD FS server is prompting for a username and password. The username is pre-populated with the the email address of the mailbox they try to add. The user have propper permissions to access the mailbox. If they change the username to their own email address and enter their own password they mailbox is successfully added to Outlook. My question is, is it possible to have Outlook authenticate using the logged on user account credentials so we get an SSO experience when adding additional mailboxes in Outlook? Regards Erik
Seamless single sign-on with MS Stream?
Hi, We currently are set up with single sign-on for SharePoint Online, so that when a staff member access a document while logged on to our network they are automatically authenticated via Azure AD and do not have to log on. We want to have the same experience using Stream, i.e. embed a Stream Video on our intranet and staff will not have to sign on. (This is a deal breaker for us) eg, can something be added to the url on the iFrame to achieve this? e.g. &domain_hint=investni.com <iframe width="640" height="360" src="https://web.microsoftstream.com/embed/video/d01f2bbf-e4f0-44d9-855e-a7b165bb361a?autoplay=false&showinfo=true&domain_hint=investni.com" allowfullscreen style="border:none;"></iframe> This doesn't seem to work for us? Is there any other way to achieve this? Thanks for your time, Ollie
