: Centrify Identity Service, App EditionQuestion:
How can an administrator determine if a specific Office 365 tenant has Exchange Online configured to use Modern Authentication (ADAL), and how to enable or disable, if needed?Answer:
Modern authentication brings Active Directory Authentication Library (ADAL) based sign-in to Office client apps across different platforms. It is not enabled by default for Exchange Online. To turn it on, an administrator will need to connect to the Office 365 tenant using Windows Azure Active Directory Module for Windows PowerShell.
For remote connection to Office365 services using PowerShell assistance, please refer to this Microsoft article (provided as a courtesy).
Check if Office365 Exchange Online is enabled for Modern Authentication:
Get-OrganizationConfig | ft name, *OAuth*Note:
- Once connected to Office365, run the following command using PowerShell while connected to the Office365 tenant to check if enabled for Modern Authentication:
If "false" is returned, the Exchange online server is not
configured for Modern Authentication. A response of "true" indicates Modern Authentication is enabled.How to enable Modern Authentication for Office365 Exchange Online:
Set-OrganizationConfig -OAuth2ClientProfileEnabled:$trueHow to disable Modern Authentication for Office365 Exchange Online:
- Once connected to Office365 via PowerShell, an Administrator will need to enter the following command;
- Once connected to Office 365 via PowerShell, an Administrator will need to enter the following command;
For additional information (including the information above) regarding the use and configuration of Modern Authentication and Office 365, please refer to the following Microsoft support article: