This means when using the New-CsOnlineSession, specify just a username or leave it blank as it will prompt for the username. In the announcement above, Microsoft specifies that when using an account with MFA enabled, you can no longer use a PSCredential object when creating the session. Let’s return to a new PowerShell window and create a new CsOnlineSession.
#Skype online user code
This code is entered into the web site to complete the set up.Īfter completing set up, I was redirected to Outlook on the Web, but this wasn’t our final goal. After following the instructions and completing the set up, the account was added to my authenticator app with a 6-digit code that refreshes every 30 seconds.
#Skype online user how to
The next page presents the instructions on how to configure the mobile app with a QR code to link your account. After select the mobile app option, click Set up.
#Skype online user verification
I opted for the mobile app option using Microsoft Authenticator for iPhone and to provide a verification code. For myself, I decided to navigate to and was presented with the following screen to set up my account with additional security verification.Īfter clicking Set it up now, I had the option to select which MFA format I wanted: Authentication Phone, Office Phone, or Mobile App. If they do not use web applications often, a different URL is provided to send them when they were enabled in the previous step. If the user regularly uses a web application, such as Outlook on the Web or OneDrive, the next time the user navigates to those pages, he or she will need to set up MFA. Now that the user is enabled, he or she will need to configure their preferred MFA option. The steps for enabling are pretty straight forward, and once completed, the user’s Multi-Factor Auth Status is now Enforced. Next, select the user(s) to enable for MFA, and select Enable underneath Quick Steps on the right.
When finished, click Save and click back on the User menu. For now, I am leaving all MFA options enabled. In the multi-factor authentication page, select the Service Settings menu to view the various options for creating app passwords, verification options, and MFA timeouts. In the Active Users window, select the More drop-down menu, and select Setup Azure multi-factor auth. First, log into the Office 365 admin portal ( ) and select Active Users on the left menu. Now it’s time to set up MFA in your tenant. Also use the Get-CsOAuthConfiguration command to verify the setting is changed. You will also want to connect to your Skype for Business Online tenant and use the Set-CsOAuthConfiguration to enable ADAL Authentication. Some minor prerequisites are needed, such as the latest version of the Skype for Business Online PowerShell Module, or at least version.
This is a simple demo using a strictly Skype for Business Online deployment. I am not getting into the pros/cons of enabling Modern Authentication or other considerations for enabling MFA for a user. This blog post is going to go through enabling and configuring a Skype for Business Online tenant with MFA. Using MFA for authentication for PowerShell sessions provides another layer of security for administrator accounts when managing Office 365 workloads. Adding Modern Authentication introduces new scenarios where multi-factor authentication (MFA) can be used for authenticating remote PowerShell sessions out to Skype for Business Online. Our industry experts have collected the latest application modernization trends impacting the automotive, financial services, healthcare, and manufacturing verticals.īack in April 2017, Microsoft announced the release of support for Modern Authentication for the Skype for Business Online PowerShell Module. Application Modernization Industry Quick GuidesĪpplication modernization enables you to optimize business processes and transform the way you do business today, and in the future.
0 kommentar(er)
