question

RickRietz-5132 avatar image
0 Votes"
RickRietz-5132 asked sikumars commented

Switching from basic authentication to modern authentication

We are going to switch from basic auth to modern auth. We have a couple of users that are set up individually under the basic auth for MFA. I know we need to turn that off first. We'd like to test the impacts of making this switch. A couple of questions -

  • If we turn it on to test, are there any impacts of turning it back off if necessary?

  • If turn modern auth on for MFA, what will the users experience?

azure-ad-multi-factor-authentication
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@RickRietz-5132 ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,

0 Votes 0 ·

1 Answer

sikumars avatar image
0 Votes"
sikumars answered

Hello @RickRietz-5132,

Thanks for reaching out.

There are two different way you can block legacy (basic) authentication to use modern authentication in your organization, One way is Blocking legacy authentication using Azure AD Conditional Access and another way of Blocking legacy authentication service-side for

Example: When you enable modern authentication in Exchange Online, Windows-based Outlook clients that support modern authentication (Outlook 2013 or later) use modern authentication to connect to Exchange Online mailboxes. For more information, see How modern authentication works for Office client apps.

When you disable modern authentication in Exchange Online, Windows-based Outlook clients that support modern authentication use basic authentication to connect to Exchange Online mailboxes. They don't use modern authentication.

Note: Modern authentication is enabled by default in Exchange Online, Skype for Business Online, and SharePoint Online.

To learn more, read Enable or disable modern authentication for Outlook in Exchange Online and Disable Basic authentication in Exchange Online

The following article is worth checking out as it walk you through a step-by-step guide to blocking legacy authentication also how you can analyze the impacts of making this changes in your organization: (https://techcommunity.microsoft.com/t5/azure-active-directory-identity/new-tools-to-block-legacy-authentication-in-your-organization/ba-p/1225302#)

Hope above information help you.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.