Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-7276: How to enable or disable Modern Authentication (ADAL) for an Office 365 tenant (Exchange Online)

Centrify Identity Service, App Edition ,  

8 August,17 at 08:00 PM

Applies to: Centrify Identity Service, App Edition



Question:

How can an administrator determine if a specific Office 365 tenant has Exchange Online configured to use Modern Authentication (ADAL), and how to enable or disable, if needed?



Answer:  

Modern authentication brings Active Directory Authentication Library (ADAL) based sign-in to Office client apps across different platforms. It is not enabled by default for Exchange Online. To turn it on, an administrator will need to connect to the Office 365 tenant using Windows Azure Active Directory Module for Windows PowerShell.

For remote connection to Office365 services using PowerShell assistance, please refer to this Microsoft article (provided as a courtesy).

Check if Office365 Exchange Online is enabled for Modern Authentication:
  • Once connected to Office365, run the following command using PowerShell while connected to the Office365 tenant to check if enabled for Modern Authentication:
     Get-OrganizationConfig | ft name, *OAuth*

Note: If "false" is returned, the Exchange online server is not configured for Modern Authentication. A response of "true" indicates Modern Authentication is enabled.


How to enable Modern Authentication for Office365 Exchange Online:
  • Once connected to Office365 via PowerShell, an Administrator will need to enter the following command;
     Set-OrganizationConfig -OAuth2ClientProfileEnabled:$true


How to disable Modern Authentication for Office365 Exchange Online:
  • Once connected to Office 365 via PowerShell, an Administrator will need to enter the following command;
           Set-OrganizationConfig -OAuth2ClientProfileEnabled:$false     



For additional information (including the information above) regarding the use and configuration of Modern Authentication and Office 365, please refer to the following Microsoft support article:

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

No related Articles