SharePoint Online 2FA with Entrust

Question

SharePoint Online 2FA with Entrust

Prakash Modak 111

Hello,

we have MS365 tenant and along with Exchange online we are using Sharepoint Online.
we want to implement two-factor authentication with Entrust for SharePoint Only .

Can anyone please guide me on how to configure Entrust as well as Sharepoint Online.?

Thanks
Prakash

1 answer

Your answer

Answer 1

Matt Maher 101

You cannot create Conditional Access Policies to enforce MFA based on first party applications (SharePoint, Teams, Outlook). However, there is a preview feature that lets you create sensitivity labels, assign them to sites, then put MFA to that site. Here is the preview feature that will let you require MFA to just SharePoint sites: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=70594

Prakash Modak 111 Reputation points

2021-06-09T23:19:34.023+00:00

Thank you for your quick response.
Can you please let me know how to do the configuration on entrust as well as MS365.

Thanks
Prakash
Allen Xu_MSFT 13,856 Reputation points

2021-06-10T07:59:15.127+00:00

@Prakash Modak

Considering that Entrust is a third-party software, while Microsoft supports and encourages open-source software development, it does not provide technical support on Microsoft Q&A for the software from third parties. As to your question, I would suggest you contact support from Entrust.

Thanks for your understanding :-)
Prakash Modak 111 Reputation points

2021-06-10T17:54:53.707+00:00

Thank you
but sharepoint or MS365 part Microsoft Q&A can guide us right ?
entrust configuration i'll talk to Entrust support.

Thanks
Prakash
Matt Maher 101 Reputation points

2021-06-10T18:37:10.227+00:00
To use the Conditional Access Policies with the AuthenticationContext preview, I would start by understanding how it works, and what limitations there are: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#authentication-context-preview.

At a high level you do the following steps:

Define a Authentication Context "NOACCESS" within AzureAD

Assign that new context to all your SharePoint Sites that you want to require MFA to with this command:
Set-SPOSite -Identity <site url> -ConditionalAccessPolicy AuthenticationContext -AuthenticationContextName "NOACCESS"

Create a Conditional Access policy with the following controls:
Users -> All Users
Cloud Apps or Actions -> Authentication Context
Grant -> Grant and Require MFA
Allen Xu_MSFT 13,856 Reputation points

2021-06-18T08:25:56.913+00:00

@Prakash Modak ,

Have you checked the answer from @Matt Maher ? If it is helpful to you, please don't forget to accept it as answer. It will be beneficial to others who meet similar issues with yours in the future :-)

Share via

SharePoint Online 2FA with Entrust

1 answer

Your answer