I therefore have a workaround, but not a solution. My concern is that MS will force modern authentication soon, and switch off basic authentication. I have confirmed that on two different PCs that are accessing the same mailbox with the same version of Outlook, which is the latest version from Microsoft included within my Office 365 package. So, it looks like the version of Outlook that I have won't play nice with Modern Authentication. I can then use Outlook to access my mailbox. Then, go into O365 Admin - Settings - Modern Authentication.Įnable Modern Authentication & allow basic authentication for 'Exchange web services', 'Autodiscover', 'MAPI over HTTP' and 'Offline Address Book'.

Had to go into Azure AD, then switch off the security defaults (. Select the appropriate Re-authetication frequency.OK, managed to switch off the forced modern authentication.Configure other options in the section.In the Then section > User must authenticate with, select any of the 2 factor types option.Select the frequency at which you want to prompt the user for MFA when accessing Office 365.From the Sign on Rule dialog, go to Actions > Prompt for Factor.Go to Office 365 > Sign on > Sign on Policy > Allow Web and Modern Auth rule > Edit.You can edit Allow Web and Modern Auth rule to prompt for MFA.įactor types should be enabled before you can use them for the MFA prompt. For more information about app sign on policies, see Get started with Office 365 sign on policies. Alternatively, you can add another to allow clients using Legacy Authentication (not recommended). You can edit this rule to make it more stringent. These methods can include multifactor authentication (MFA), client certification-based authentication, Azure Active Directory Authentication Library (ADAL), and Open Authorization (OAuth).

Modern authentication is a term for a combination of authentication and authorization methods. The other Okta-provided rule allows access to only web browsers and apps that support Modern Authentication. This prevents clients that use Legacy Authentication from accessing Office 365. This rule denies access to all clients from any network. The default sign-on rule for Office 365 is different than other apps in Okta. Secure Office 365 using app sign-on policies Before you beginĬomplete Assign Office 365 to users and groups.

Modern auth office 365