SharePoint Online 2FA with Entrust

Prakash Modak 91

Hello,

we have MS365 tenant and along with Exchange online we are using Sharepoint Online.
we want to implement two-factor authentication with Entrust for SharePoint Only .

Can anyone please guide me on how to configure Entrust as well as Sharepoint Online.?

Thanks
Prakash

1 answer

Matt Maher 101 Reputation points

2021-06-09T20:18:55.64+00:00

You cannot create Conditional Access Policies to enforce MFA based on first party applications (SharePoint, Teams, Outlook). However, there is a preview feature that lets you create sensitivity labels, assign them to sites, then put MFA to that site. Here is the preview feature that will let you require MFA to just SharePoint sites: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=70594
Please sign in to rate this answer.

2 people found this answer helpful.
Prakash Modak 91 Reputation points

2021-06-09T23:19:34.023+00:00

Thank you for your quick response.
Can you please let me know how to do the configuration on entrust as well as MS365.

Thanks
Prakash

Allen Xu_MSFT 13,776 Reputation points

2021-06-10T07:59:15.127+00:00

@Prakash Modak

Considering that Entrust is a third-party software, while Microsoft supports and encourages open-source software development, it does not provide technical support on Microsoft Q&A for the software from third parties. As to your question, I would suggest you contact support from Entrust.

Thanks for your understanding :-)

Prakash Modak 91 Reputation points

2021-06-10T17:54:53.707+00:00

Thank you
but sharepoint or MS365 part Microsoft Q&A can guide us right ?
entrust configuration i'll talk to Entrust support.

Thanks
Prakash

Matt Maher 101 Reputation points

2021-06-10T18:37:10.227+00:00

To use the Conditional Access Policies with the AuthenticationContext preview, I would start by understanding how it works, and what limitations there are: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#authentication-context-preview.

At a high level you do the following steps:

Define a Authentication Context "NOACCESS" within AzureAD

Assign that new context to all your SharePoint Sites that you want to require MFA to with this command:
Set-SPOSite -Identity <site url> -ConditionalAccessPolicy AuthenticationContext -AuthenticationContextName "NOACCESS"

Create a Conditional Access policy with the following controls:
Users -> All Users
Cloud Apps or Actions -> Authentication Context
Grant -> Grant and Require MFA

Allen Xu_MSFT 13,776 Reputation points

2021-06-18T08:25:56.913+00:00

@Prakash Modak ,

Have you checked the answer from @Matt Maher ? If it is helpful to you, please don't forget to accept it as answer. It will be beneficial to others who meet similar issues with yours in the future :-)
Sign in to comment