question

AnkitRathod-6794 avatar image
0 Votes"
AnkitRathod-6794 asked amanpreetsingh-msft commented

Office 365 A1 and A3 License || SSO | MFA

Customer is On-Premises Active Directory Server (Windows Server 2016), Office 365(A1 and A3) and other Cloud Based Apps as FACTS SIS, Odoo ERP, Full Fabric., for the Same all the User’s (Faculty, Students) credentials are Created and Managed Independently.

Hence Customer wants to enable SSO and MFA for all the users by Integrating On-Premise AD with Office 365 AD, and manage SSO and MFA from Office 365 AD.

Since all the users are having License A1 and A3 will this Suffice the requirement, if not what additional license are required ??

Also what will the feasible Solution ?

azure-ad-multi-factor-authenticationazure-ad-single-sign-on
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered amanpreetsingh-msft commented

@AnkitRathod-6794 · Thank you for reaching out.

In all Microsoft 365 plans, Azure AD Multi-Factor Authentication can be enabled on a per-user basis and the management of Azure MFA is done through the Microsoft 365 portal.

If you want to enable or disable MFA for all users at once, it can be done using Security Defaults. This feature is available for free and the limitation is, you can not enable MFA for a specific set of users, it can be either all users or no users.

To configure SSO, you can configure Seamless SSO in Azure AD connect. Please refer to below docs for better understanding:
- What is Azure Active Directory Seamless Single Sign-On?
- Azure Active Directory Seamless Single Sign-On: Quickstart


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

hi @amanpreetsingh-msft.,

Does the A1 and A3 for faculty and students license will be enough for enabling the SSO and MFA ??

Please confirm..

0 Votes 0 ·

@AnkitRathod-6794 · Yes, with A1 and A3 for faculty and students license you can enable MFA on per user basis using portal.office.com. There are no licenses required for Seamless SSO.

In fact, if you don't have any license at all (not even A1 and A3 for faculty and students license), you can still enable MFA for all users using Security Defaults.

0 Votes 0 ·

Thanks @amanpreetsingh-msft for the confirmation.

Also If I want to configure SSO for 3rd Applications with the Synced Accounts(local Directory users and groups) from O365.
can you help me understand to how is it possible ?

0 Votes 0 ·
Show more comments