Authentication migration

Question

I Need to migrate to the converged Authentication methods. I need to know if I do an automatic migration that the users won’t be prompted for anymore authentication. I don’t want to interrupt the 170 or so users when they login and launch Outlook after I do the migration. Are my users going to be affected by this migration? I have an Exchange hybrid configuration with one server on premises (Exchange 2016 v.15.1 build 2507.6). All mailboxes are migrated over to the cloud. Our AD is replicated to Azure AD with Entra. All users access their mailboxes with Outlook 2016, after longing into the domain, with no passwords (Single Sign On). We currently don’t use any other authentication, such as MFA, nor do we plan to, yet. Thanks

 

Don

Answer 1

Hi @Corwin, Don

Thank you for reaching out to Microsoft regarding your request to migrate to converged authentication methods within your Microsoft Entra ID environment, while ensuring no interruption to your 170 users' login and Outlook experience. 

We understand the critical importance of maintaining seamless operations, especially as your users currently enjoy Single Sign-On (SSO) and don't need to enter passwords for Outlook 2016. 

To thoroughly investigate the best solution for your request, we've dedicated time to researching official Microsoft documentation and proactively attempted to test this scenario in our internal environments. However, we've encountered some challenges in accurately replicating the specific "migration" steps or functionalities that might be relevant to your long-standing tenant. This is due to inherent differences in how our respective environments are configured and maintained over time, which impacts our ability to fully validate the migration process. 

As a Microsoft 365 support agent, my expertise focuses on core Microsoft 365 services. Providing in-depth guidance for specific authentication architecture migrations in Microsoft Entra ID, where direct environment testing is crucial, falls outside our current capabilities. 

For accurate and in-depth support, we recommend contacting the Microsoft Entra ID Support Team. They specialize in identity and authentication services and are best equipped to guide you through migrating authentication methods in a secure and disruption-free manner. 

Contact Microsoft Entra ID Support:  You can submit a support request directly through the Microsoft Entra admin center: 

1. Sign in at https://entra.microsoft.com/ with an account that has sufficient permissions. 
2. Navigate to Learn & Support > New support request. 
3. Provide the necessary details, such as issue type, description, and preferred contact method. 
4. Submit the request and wait for follow-up from the Entra ID support team. 

You can also refer to Microsoft’s official documentation here: 

How to migrate MFA and SSPR policy settings to the Authentication methods policy for Microsoft Entra ID: https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-methods-manage 

Manage authentication methods for Microsoft Entra ID: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods-manage 

Plan a Microsoft Entra multifactor authentication deployment: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-getstarted 

We understand this may cause some inconvenience, and we appreciate your understanding of our support scope limitations. Our goal is to ensure you're connected with the most suitable team to resolve your request effectively. 

Should you have any other questions related to Microsoft 365 services within our support scope, please feel free to reach out. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.