You want to enable (or have already activated) multi-factor authentication for your users in Office 365?

If you use an older tenant, you will encounter problems with the configuration of Outlook and Skype for Business Clients.

This is because older tenants have not enabled the feature of modern authentication for Exchange Online and Skype for Business Online.

Only new tenants have enabled this feature by default.

Now what can you do? Don't use multi-factor authentication and have less security?

The answer is clear NO! I'm going to show you how to enable modern authentication in Exchange Online and Skype for Business Online.

First, you need to connect to your Exchange Online using PowerShell and a Global Administrator without multi-factor authentication.

Note:

- If you are using Office 365 from 21Vianet, use this URL for the connection:

https://partner.outlook.cn/PowerShell

- If you are using Office 365 from the Germany Cloud, use this URL for the connection:

https://outlook.office.de/powershell-liveid/

Then check the settings of your organization.

If the OAuth2ClientProfileEnabled property is false, modern authentication is not enabled. To activate, we need to run the following command.

Then we can check again if the setting is now true.

If the setting is true, we can close this PowerShell session.

Next, we need to do the same activation for Skype for Business Online. To do this, we connect to the Skype for Business Online PowerShell (the credentials we still have from the previous PowerShell session).

Check the settings of your Skype for Business Configuration.

If the ClientAdalAuthOverride property is not Allowed, modern authentication is not enabled. To activate, we need to run the following command.

Then we check again if the setting is now Allowed.

If the setting is Allowed, we can close this PowerShell session.

That's it, Exchange Online and Skype for Business are now configured for modern authentication and therefore the use of multi-factor authentication.

Now you can enable your users for multi-factor authentication without problems in Outlook and Skype for Buiness.

You can download a script here which sets these settings for you.

Enable-DSModernAuthenticationO365.ps1

#O365 #Office365 #MFA #MultiFactor #multifactor #Outlook #Skype #SkypeforBusiness #OutlookMFA #SfB #SfBMFA #SkypeforBusinessMFA #SkypeMFA #modernauthentication #modernauth