niomtotally.blogg.se

Discover how to empower innovation from non-traditional developers with the Microsoft Power Platform. Unleash the Potential of Power Platform With a Center of Excellenceīusiness innovation often comes from within. So instead of being able to use the Azure Multi-Factor Authentication feature, your only option is the stop-gap “ App Passwords” feature which is far from great. I refuse to accept that saving credentials in the credential manager is true “single sign-on”, especially given that you’ve entered your login more than once (seemingly breaking the definition of “single”).Īn additional difficulty with the current authentication process is that it doesn’t allow for a good way to implement multi-factor authentication (MFA). The user will have “reduced sign-on” until the next password change at which point the saved credentials are no longer valid. So upon the next launch of Outlook, the user is not prompted for credentials again but it is because the credentials are stored. After the user enters the login and password, there is an option to “save” the credentials using the Windows credential manager. This is because Outlook is actually doing “basic authentication” to Office 365 and if you look at the traffic flows, Exchange Online is authenticating to your on-premises AD FS on behalf of the user. In the current process, a user launches Outlook and is prompted for his/her Office 365 credentials. Last week Microsoft somewhat quietly updated documentation around “Modern Authentication” which gets us closer to “true” single sign-on.īelow is a link-filled overview of Modern Authentication and how it gets us closer to “true” single sign-on… While it is true that AD FS provides single sign-on for some workloads, I’ve often argued that Outlook, possibly the most popular application used with Office 365, is not single sign-on under any scenario. Many will provide the statement that if you implement AD FS, then you have single sign-on. One of the Office 365 concepts that gets glossed over a bit is “single sign-on”, in particular when it comes to Outlook.