OneDrive Storage Account in Adobe and DUO MFA (Conditional Access)

Question

OneDrive Storage Account in Adobe and DUO MFA (Conditional Access)

Cloud_Geek_82 901

Hi guys,

I'm trying to add OneDrive storage account in Adobe Acrobat using Office 365 work email address.

However, when I click Accept I get the following error

My work email address has to go through DUO MFA verification for the following apps in Conditional Access.
Office 365
Office 365 Exchange Online

Tried to exclude OneDrive but still getting error.
Fiddler revealed this

If someone knows how to fix it please share he solution

Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-09-16T23:11:35.66+00:00

@Cloud_Geek_82 Can you go to Azure portal to your tenant and check in Azure Active Directory > Enterprise Applications > Adobe Acrobat > Permissions and User Consent tab if user consent is coming as shown below.

Also, once you click Users link under "Granted By" column you could check if the permissions have been granted to the user you are logging in with.
When you consent through the popup you have received while adding the account on Adobe Acrobat reader, all these permissions are added against the user on Adobe Acrobat application in your tenant.

3 answers

Your answer

Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-09-16T23:11:35.66+00:00

@Cloud_Geek_82 Can you go to Azure portal to your tenant and check in Azure Active Directory > Enterprise Applications > Adobe Acrobat > Permissions and User Consent tab if user consent is coming as shown below.

Also, once you click Users link under "Granted By" column you could check if the permissions have been granted to the user you are logging in with.
When you consent through the popup you have received while adding the account on Adobe Acrobat reader, all these permissions are added against the user on Adobe Acrobat application in your tenant.

Answer 1

@Saurabh Sharma

In Azure Active Directory > Enterprise Applications > Adobe Acrobat > Permissions and User Consent tab I can see exactly the same.
If I expand details I can see:
Permission type - Delegated. Delegated type means that this application may act on behalf of a user as the user him or herself for this particular permission.
Permission granted through - User Consent. A permission granted through user consent means a user signed in to this application with his or her organizational credentials and granted it the particular permission.
Granted by - 1 total user (this is myself)

If I check Conditional Access fro Adobe Acrobat there no DUO MFA policy applied
This makes me think when I enter my business email address and password then it is not Adobe that prevents me from adding account but something related to O365 services.
Should I exclude OneDrive or SharePoint Online?

Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-09-18T18:37:08.787+00:00

@Cloud_Geek_82 I suggest you please open a support ticket with Microsoft to look into your environment and further analyze your fiddler traces to understand the rootcause. Please let me know if you need any help with opening a support case and I will raise a one time free support ticket for you.

Answer 2

Cloud_Geek_82 901

@Saurabh Sharma ,

I've already raised it with them but after some investigation on their side I was advised to contact Adobe.
I'm not sure if Adobe has anything to do with this issue.

Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-09-25T05:56:22.023+00:00

@Cloud_Geek_82 I am checking internally with the products team on the same and let you know in case if they have any other opinion.
Saurabh Sharma 23,851 Reputation points Microsoft Employee Moderator

2020-10-30T17:02:03.353+00:00

@Cloud_Geek_82 Sorry for the delay. As per products team this is because OneDrive uses services that would apply to Exchange Online. Same goes for MS Teams. So you can't just exclude Onedrive and have it applied to exchange.

Answer 3

Brian L. Thomas 1

I'm experiencing this same issue. I do not have a solution, and although I'm still looking for one, I do have a work around. In Adobe you can connect to OneDrive if you choose add an account, then choose SharePoint instead of OneDrive. Put in the URL of your OneDrive and it will connect.

Share via

OneDrive Storage Account in Adobe and DUO MFA (Conditional Access)

3 answers

Your answer