Now with your tenant configuration complete, you may need to enable single sign-on with Azure AD Connect. For more complex scenarios with ADFS, you may need to consult this article: How to use Modern Auth. In my environment, the admin account I’m using has a different domain to the domain used by Skype for Business, hence I’ve added the OverrideAdminDomain parameter. $Cred = Get-Credential $session = New-CsOnlineSession -Credential $cred -Verbose -OverrideAdminDomain Import-PSSession $Session Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed Then connect to your Office 365 tenant and enable OAuth with Set-OrganizationConfig, via the following code: You’ll need to first install the Azure AD PowerShell module. Enabling Modern Authentication for Exchange Onlineįull details for enabling modern authentication are available in this article for Exchange Online from Microsoft however here’s the short version. Why this is, I’m not sure, but you’ll need to enable modern authentication for Exchange Online and Skype for Business for this feature to work on the client end. Turned off for Skype for Business Online by default.

Turned on for SharePoint Online by default.Turned off for Exchange Online by default.

In that article we can see that modern authentication is: Microsoft has described how modern authentication works in Office 20 client applications. However it’s not enough just to deploy a recent version of Office, modern authentication (or OAuth) needs to be enabled in your tenant. Office applications previous to 2013 aren’t capable of modern authentication, but if you’re deploying Office 365 your likely deploying Office 365 ProPlus - 2013 or later. Modern authentication is, of course, the way to improve user experience but it’s not enabled by default. Unfortunately this will only serve to confuse users and result in calls to your service desk.

Enabling Modern Authentication for Skype for Business OnlineĮnabling Azure AD and Office 365 features including multi-factor authentication and Conditional Access will impact your users because they’ll need utilise App Passwords (one time passwords used for authentication with legacy applications).

Enabling Modern Authentication for Exchange Online.

Office 2013 modern authentication