Share via

Switching from basic authentication to modern authentication

Rick Rietz 1 Reputation point
2021-02-22T14:22:58.457+00:00

We are going to switch from basic auth to modern auth. We have a couple of users that are set up individually under the basic auth for MFA. I know we need to turn that off first. We'd like to test the impacts of making this switch. A couple of questions -

  • If we turn it on to test, are there any impacts of turning it back off if necessary?
  • If turn modern auth on for MFA, what will the users experience?
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,453 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Siva-kumar-selvaraj 15,601 Reputation points
    2021-02-25T12:05:25.507+00:00

    Hello @Rick Rietz ,

    Thanks for reaching out.

    There are two different way you can block legacy (basic) authentication to use modern authentication in your organization, One way is Blocking legacy authentication using Azure AD Conditional Access and another way of **Blocking legacy authentication service-side for **

    Example: When you enable modern authentication in Exchange Online, Windows-based Outlook clients that support modern authentication (Outlook 2013 or later) use modern authentication to connect to Exchange Online mailboxes. For more information, see How modern authentication works for Office client apps.

    When you disable modern authentication in Exchange Online, Windows-based Outlook clients that support modern authentication use basic authentication to connect to Exchange Online mailboxes. They don't use modern authentication.

    Note: Modern authentication is enabled by default in Exchange Online, Skype for Business Online, and SharePoint Online.

    To learn more, read Enable or disable modern authentication for Outlook in Exchange Online and Disable Basic authentication in Exchange Online

    The following article is worth checking out as it walk you through a step-by-step guide to blocking legacy authentication also how you can analyze the impacts of making this changes in your organization: (https://techcommunity.microsoft.com/t5/azure-active-directory-identity/new-tools-to-block-legacy-authentication-in-your-organization/ba-p/1225302#)

    Hope above information help you.

    ------------------------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments