{"id":179326,"date":"2018-03-21T10:18:00","date_gmt":"2018-03-21T15:18:00","guid":{"rendered":"https:\/\/www.ntegrait.com\/problems-with-two-factor-authentication-in-office-365\/"},"modified":"2018-03-21T10:18:00","modified_gmt":"2018-03-21T15:18:00","slug":"problems-with-two-factor-authentication-in-office-365","status":"publish","type":"post","link":"https:\/\/ntegrait.com\/problems-with-two-factor-authentication-in-office-365\/","title":{"rendered":"Problems with Two-Factor Authentication in Office 365?"},"content":{"rendered":"

We noticed that some people are having problems using Microsoft Office 365 with two-factor authentication (2FA) (also known as multi-factor authentication).<\/p>\n

\"Office<\/p>\n

\u00a0<\/p>\n

We have a few tips for you here.<\/strong><\/p>\n

First: It\u2019s important to know that when your admin sets up 2FA for your Office 365 users, they must enable Modern Authentication (MA) for Exchange Online if users are accessing Exchange using Outlook 2016. (The versions of Microsoft Outlook before 2013 don\u2019t support Modern Authentication.)\u00a0 For details on how to enable MA for Exchange Online tenants, see Enable Modern Authentication in Exchange Online.<\/a><\/p>\n

Second: You shouldn\u2019t have any problem using 2FA with Microsoft\u2019s mobile Office apps, Outlook Groups, Office 2016 desktop apps, and\u00a0OneDrive for Business in Windows 10. However, other applications may be incompatible, so make sure you test all the apps in your organization before enabling 2FA.<\/p>\n

How to Connect to Office 365 Security & Compliance Center PowerShell Using 2FA.<\/h2>\n

If you set up 2FA for tenant administrator accounts, they can\u2019t sign in to Office 365 using PowerShell.<\/a> Instead, you must set up a specialized account for administrators. To do this, you must install the Exchange Online Remote PowerShell Module and use the\u00a0Connect-IPPSSession<\/strong>\u00a0cmdlet to connect to Security & Compliance Center PowerShell.<\/p>\n

Important note from Microsoft: You can\u2019t use the Exchange Online Remote PowerShell Module to connect to Exchange Online PowerShell and Security & Compliance Center PowerShell in the same session (window). You need to use separate sessions of the Exchange Online Remote PowerShell Module.<\/p>\n

This is what Microsoft recommends you do:<\/p>\n

    \n
  1. Open the Exchange admin center (EAC) for your Exchange Online. See Exchange admin center in Exchange Online<\/a>.<\/li>\n
  2. In the EAC, go to\u00a0Hybrid<\/strong>>\u00a0Setup<\/strong>\u00a0and click the appropriate\u00a0Configure<\/strong>\u00a0button to download the Exchange Online Remote PowerShell Module for multi-factor authentication.<\/li>\n
  3. In the\u00a0Application Install window that opens, click\u00a0Install<\/strong>.<\/li>\n<\/ol>\n

    Windows Remote Management (WinRM) on your computer should allow authentication by default. If basic authentication is disabled, you\u2019ll get an error message. Now you should be able to sign into the Security & Compliance Center PowerShell by using 2FA.<\/p>\n

    After you sign in, the Security & Compliance Center cmdlets will be imported into your Exchange Online Remote PowerShell Module session and tracked by a progress bar. If you don\u2019t receive any errors, you\u2019ve done this successfully.<\/p>\n

    If not, and you receive errors, check the following requirements:<\/p>\n