(Cloud) Tip of the Day: Multi-Factor Authentication for Office 365 and Windows Intune

  • Article

Today’s Tip…

Multi-Factor Authentication (MFA) for Office 365 was released on February 10th with the Office 365 blog announcement.

MFA is also available for Windows Intune.

This expands the MFA offering we had for admins, to users of Office 365 or Windows Intune. This will allow organizations with Office 365 or Windows Intune subscriptions to enable multi-factor authentication for their users without requiring any additional purchase or subscription as long as you have at least one Office 365 or Windows Intune subscription of any type.

Overview of Basic MFA

  • Admin can enable MFA for User’s in their organization.
  • User can complete enrollment and create app passwords.
  • User can sign into browser apps using either a mobile app, phone call or SMS.
  • User can sign into non-browser apps using a App Password.

You can read up more on MFA for Office 365 here and on advanced features of Windows Azure Multi-Factor Authentication here. 

There are some known applications that do not work with App Passwords…

  • Users or Admins enabled for MFA will not be able to sign in to OWA for iPhone (MOWA)
  • Users or Admins enabled for MFA will not be able to sign in to Windows Azure Module for Windows PowerShell

For a list of supported applications, go to https://technet.microsoft.com/en-us/library/7a9c56cf-72f1-4797-8e86-a9a2d9569ef6#whatareapp