: Centrify Identity Service, App EditionQuestion:
How can an administrator determine if a specific Office 365 tenant has Exchange Online configured to use Modern Authentication (ADAL), and how to enable or disable, if needed?Answer:
Modern authentication brings Active Directory Authentication Library (ADAL) based sign-in to Office client apps across different platforms. It is enabled by default for Exchange Online. To turn it on or off,, an administrator will need to connect to the Office 365 tenant using Windows Azure Active Directory Module for Windows PowerShell.
For remote connection to Office365 services using PowerShell assistance, please refer to this Microsoft article (provided as a courtesy).
Check if Office365 Exchange Online is enabled for Modern Authentication:
Modern authentication is enabled by default in Exchange Online, Skype for Business Online and SharePoint Online.
Other Outlook clients that are available in Office 365 (for example, Outlook Mobile and Outlook for Mac 2016) always use modern authentication to log in to Office 365 mailboxes.
You should synchronize the state of modern authentication in Exchange Online with Skype for Business Online to prevent multiple log in prompts in Skype for Business clients. For instructions, see https://aka.ms/SkypeModernAuth.
Get-OrganizationConfig | ft name, *OAuth*Note:
- Once connected to Office365, run the following command using PowerShell while connected to the Office365 tenant to check if enabled for Modern Authentication:
If "false" is returned, the Exchange online server is not
configured for Modern Authentication. A response of "true" indicates Modern Authentication is enabled.How to enable Modern Authentication for Office365 Exchange Online:
Set-OrganizationConfig -OAuth2ClientProfileEnabled:$trueHow to disable Modern Authentication for Office365 Exchange Online:
- Once connected to Office365 via PowerShell, an Administrator will need to enter the following command;
- Once connected to Office 365 via PowerShell, an Administrator will need to enter the following command;
For additional information (including the information above) regarding the use and configuration of Modern Authentication and Office 365, please refer to the following Microsoft support article: