Shulou(Shulou.com)06/03 Report--

I wrote an article Office365 Exchange Hybrid No.21 Office365 MFA a long time ago about how to enable and use MFA in Office365. Last week, a colleague asked me why I need to open an application to log in normally after entering a user name and password when logging in to a customer's Office365. At that time, I said in the group that this was MFA but did not explain how to use it. Today, I would like to share how to play this. It is more convenient to send text messages and phone calls. You can log in with one click in APP.

First of all, log in to the Office365 console, enter the active user, and click more above to select multiple authentication settings.

Here I choose my account to do the demonstration, click start on the right.

Click to enable multi-factor auth

Enabled successfully

At this time, the default is to send text messages for secondary authentication, as shown in the figure below.

The SMS verification code is received on the mobile phone. Enter the verification code and log in normally.

It's time to use the advanced function, how to bind my Office365 account in Microsoft Authenticator APP.

After logging in to Office365, click the gear setting button in the upper right corner and select Office365

Click Security and Privacy. If MFA in Office365 is enabled, users will have additional authentication settings, as shown below.

Click to update the secure phone number (do not apply the password, I have tried that the security is too high, the end user will be crazy to operate, and the login of the outlook skype onedrive client will not be successful because of the high probability of applying the password alone)

Select Settings Authenticator App

At this time, there will be a QR code / CAPTCHA / trusted URL. These three things are used to verify the account when binding the account to the APP.

Next, go to the app store to download Microsoft Authenticator APP and click add account.

Select a work or school account

Then the camera will be turned on to scan the QR code and scan the QR code on the Office365 website for binding.

At this time, the Office365 page automatically changes to the validated active state.

After the activation is completed, the first prompt to reply to the request will appear

When you return to the APP of your phone, you will be prompted whether to allow login or not, and click approve.

After approval, you can complete the setting. Finally, you have to set the following preference: notify me through the application for secondary authentication, which means that all applications that log in to Office365, including websites, need to approve through this APP in the future.

At this point, the entire MFA configuration is complete. Finally, click Save to save all configurations.

When you click Save, you will be prompted for authentication.

At this time, the approval operation needs to be carried out on the APP.

Finally, the configuration was updated successfully

To test it, log in to the Office365 portal page and prompt that the notification has been sent to APP after entering the correct user name and password. Just click reject or approval to complete the corresponding operation.

Click approval must be able to log in, I tried to click reject, the Web page indicates that the login request has been rejected

Then open the outlook client, and you will also be prompted for secondary authentication

If nothing is done on APP for a long time, the client will choose another authentication method after the timeout.

Test the use of mobile phone verification code

Finally, login is successful.

Finally, I also tested that the second authentication will be carried out when opening mobile applications such as outlook skype onedrive, but it is not very friendly to use the method approved by APP, and it is most convenient to use the random 6-digit verification code of Authenticator on the tested mobile app.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.