Set up multi-factor authentication in the Office 365 admin center

  1. Go to the Office 365 admin center.
  2. Navigate to Users > Active users.

    Active users in Office 365 admin center

  3. In the Office 365 admin center, click More > Setup Azure multi-factor auth.

    Set up multifactor authentication

  4. Find the user or users who you want to enable for MFA. In order to see all the users, you might need to change the Multi-Factor Auth status view at the top.

    The views have the following values based on the MFA state of the users:

    • Any    Displays all users. This is the default state
    • Enabled    The user has been enrolled in multi-factor authentication, but has not completed the registration process. They will be prompted to complete the process the next time they sign in.
    • Enforced    The user may or may not have completed registration. If they have completed the registration process then they are using multi-factor authentication. Otherwise, the user will be prompted to complete the process at next sign-in.
  5. Check the check box next to the users you want to enable.

    Users selected for MFA.

  6. On the right user info pane, under quick steps you’ll see Enable and Manage user settings. Choose Enable.
  7. In the dialog box that opens, click enable multi-factor auth.

Allow MFA users to create App Passwords for Office client applications

Important: App passwords are not supported for Office 365 operated by 21Vianet.

Multi-factor authentication is enabled per user. This means that if a user is enabled for multi-factor authentication and they are attempting to use non-browser clients, such as Outlook 2013 with Office 365, they will be unable to do so. An app password allows this to occur. An app password, is a password that is created within the Azure portal that allows the user to bypass the multi-factor authentication and continue to use their application.

All the Office 2016 client applications support multi-factor authentication through the use of the Active Directory Authentication Library (ADAL). This means that app passwords are not required for Office 2016 clients. However, if you find that this is not the case, make sure your Office 365 subscription is enabled for ADAL. Connect to Exchange Online PowerShell and run the Get-OrganizationConfig | Format-Table name, *OAuth* command.

If you need to enable it, run Set-OrganizationConfig -OAuth2ClientProfileEnabled:$true .

  1. Go to the Office 365 admin center.
  2. Navigate to Users > Active users. Your screen should look like one of the following:

    Active users in Office 365 admin center

  3. In the Office 365 admin center, click More > Setup Azure multi-factor auth.

    Set up multifactor authentication

  4. In the multi-factor authentication page, choose service settings.

    MFA service settings.

  5. Under app passwords, choose Allow users to create app passwords to sign into non-browser applications.

    This allows users to use client Office applications, but they will have to enter a password of their choosing first.

  6. Click Save, and then Close.
Manage MFA user settings
  1. In the multi-factor authentication page, check the box next to the user or users you want to manage.
  2. In the user info pane on the right, you’ll see two options: Enable and Manage user settings. Choose Manage User settings.
  3. In the Manage user settings dialog, check one or more of the options: Require selected users to provide contact methods again, Delete all existing app passwords generated by the selected users, or Restore Multi-Factor Authentication on all remembered devices.
  4. Click Save.
Bulk-update users in MFA

You can bulk update the status for existing users using a CSV file. The CSV file will be used only for enabling or disabling multi-factor authentication based on the user names present in the file. It is not used to create new users.

  1. In the multi-factor authentication page, click bulk update.
  2. Browse for the file that contains the updates. The column headings in your file must match the column headings in the following example:

    bulk update CSV sample file

Send your feedbacks

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s