Outlook modern authentication pop up prompt

[mehball]

Since 365 moved to modern authentication each time a user logs in to a PC they have not used before they are prompted to enter their username/password. This has only started happening since the move to modern auth.

Are there any fixes for this or workarounds?

 

 

[Steve21]

If it's still popping up with modern auth turned on you haven't set something up right normally, as it only falls back to asking for a login if it can't login automatically.

 

Does it automatically log them on fine if they browse to emails etc via the website? Or does it prompt on that too?

 

Steve

[mehball]

We never use web access, I guess when users do then the browsers stored their credentials. This is using Outlook 2016 and pops up the first run of Outlook each time. I would like to get this so that when it prompts for credentials, this then remembers this and roams with the profile.

[Steve21]

It shouldn't be prompting at all though if it's setup correctly, it would automatically look at their username and link it to the account and login. So every new computer would do the same and never requires a manual login.

 

You still need to do config to your tenant to get SSO/ModernAuth to work properly, else you're just signing in manually and it won't follow you on new computers unless you're roaming profiles but that isn't modern auth then.

 

GPO wise do you have - Automatically configure profile based on Active Directory Primary SMTP address - configured?

 

And then running against your tenant via powershell etc, what's

Get-OrganizationConfig 

return in regards to OAuth2?

 

Steve

[mehball]

OAuth2ClientProfileEnabled : True

 

In terms of GPO's we don't have that setting saved but instead have the following...

 

https://imgur.com/LrdqJ5s

 

 

Out autodiscoer is DNS on our domain so autodiscover.ourdomain.com points to autodiscover outlook.

Edited May 29, 2018 by mehball