What are the supported Authentication types in SharePoint 365

RNA-5508 1 Reputation point
2021-10-12T12:33:53.537+00:00

Hi,

What are the supported Authentication types in SharePoint 365?

Is Windows Authentication supported by the way?

The OData connection manager fails the "test connection"

Regards

SQL Server Integration Services
SQL Server Integration Services
A Microsoft platform for building enterprise-level data integration and data transformations solutions.
2,453 questions
SharePoint Server Development
SharePoint Server Development
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Development: The process of researching, productizing, and refining new or existing technologies.
1,573 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Allen Xu_MSFT 13,776 Reputation points
    2021-10-13T02:09:02.933+00:00

    Hi @RNA-5508 ,

    Microsoft 365(SharePoint Online) uses Azure AD for authentication. Every Microsoft 365 tenant has a separate Azure AD. You can make use of your existing authentication system (like Active Directory) when implementing authentication for Microsoft 365. There are two possible options:

    • Synchronized identities: Accounts are synchronized between Azure AD and your On-Premises directory. You can choose to sync passwords as well, or let users have a different password for both.
    • Federated identities: In this model, users always authenticate against your internal directory. When signing into Microsoft 365, users are redirected to your internally hosted identity provider, like ADFS. When signed in successfully, users are redirected to Microsoft 365 and are logged in.

    For more information, see this excelllent article: Microsoft 365 identity models and Azure Active Directory.

    Besides the two authentication options for identity management, the third way to manage your users is multifactor authentication.

    The idea behind multifactor authentication is that a physical item is required when signing in. In most cases this will be a code sent via text or phone call, or is generated by a mobile app. When logging in with your username and password, a key generated by the multifactor device must also be entered. In Microsoft 365, you can configure multifactor authentication from the Microsoft 365 Admin Center. You can choose which users you want to enable it for, and what to do if the client does not allow multifactor authentication.

    There is a fourth option – namely, using separate Microsoft 365 accounts, (so-called “onmicrosoft”-accounts, as the format is username@tenant .onmicrosoft.com. This is only useful in demo purposes, or when you don’t have an internal directory, which is unlikely.


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.