For more information, see Can Azure AD AuthPoint Users Use Office 365 and FAQ for AuthPoint and Microsoft Azure Active Directory.įor information about the URLS and IP ranges used by AuthPoint services, refer to WatchGuard Cloud URLs and Network Access Requirements. Office 365 must already be configured and deployed before you set up MFA with AuthPoint.ĭue to a Microsoft limitation, Office 365 only supports AuthPoint MFA for Azure AD users if they are synced with a local AD server (it does not support MFA for users that only exist in Azure AD).

This document describes how to set up multi-factor authentication (MFA) for Microsoft Office 365® with AuthPoint as an identity provider. Office 365 users may experience a small delay in activation of MFA on all protocols due to propagation of configuration settings and credential cache expiration.Īdditional information on enabling OAuth in Office 365 and Exchange Server can be found on and MSDN.Office 365 Integration with AuthPoint Deployment Overview Outlook on the Web (OWA) and Outlook client access are also enabled in Office 365. Exchange Web Services (EWS) is an Office 365 client endpoint which is enabled. In Office 365, when Azure MFA is enabled within a tenant, it is applied to all supported client protocol endpoints.Before implementing MFA with Exchange Server it is important that all client protocol touchpoints are identified and configured correctly. Multi-Factor Authentication in Exchange Server can be enabled in multiple ways, including OAuth. Supported authentication mechanisms are configured independently on a per protocol endpoint basis. In Exchange Server, authentication configuration settings for client endpoints are not shared across protocols.

The reported technique does not pose a risk to Exchange Server or Office 365: We have determined that the technique described is not a vulnerability and the potential bypass does not exist on properly configured systems. Microsoft has evaluated recent reports of a potential bypass of 2FA. Multi-Factor Authentication (MFA), which includes Two-factor authentication (2FA), in Exchange Server and Office 365, is designed to protect against account and email compromise.

Enabling 2fa office 365