Microsoft Authenticator Lite for Outlook

[Jobos]

I've been getting emails from MS 365 message centre telling me about the new way to login to 365 that's coming next month and from what I gather it uses the Outlook app on the users phone as an authenticator.

 

I use SMS authentication on my standard school email and the 365 admin account and it works fine but none of the other staff use MFA. This looks like MFA will be enabled by default but they can disable it if they want.

 

Does anyone know what would happen if a user doesn't have Outlook on there phone, i.e. would it just continue without any MFA prompts? I'm about the only one who doesn't have the app as I didn't like getting work emails when not working but I expect some staff to disable MFA as strictly speaking staff are not allowed personal phones in the classroom.

 

Video of it here https://janbakker.tech/authenticator-lite-approve-azure-mfa-prompts-with-the-outlook-app

Edited May 22, 2023 by Jobos
Added link

[ZeroHour]

I use SMS authentication on my standard school email and the 365 admin account and it works fine but none of the other staff use MFA. This looks like MFA will be enabled by default but they can disable it if they want.

 

Does anyone know what would happen if a user doesn't have Outlook on there phone, i.e. would it just continue without any MFA prompts?

 

Reading the docs it appears this option will only work if you have registered for MFA/Authenticator right now. Its disabled by default on o365 right now as its in preview. It seems strange to have to have the Authenticator app to use it but its probably because its in beta.

I do expect MS to eventually remove SMS auth (or charge a fee for it) as its costly and not very secure, once this is rolled out I would hope you issue a Temporary Pass to the new user, they install outlook and use the Temp pass to link it and auth in for the first time and then after that they are good to go.

If they user doesnt want outlook they can use the standard authenticator app as an MFA auth.

 

Not having to install an extra app is good kinda like how its working with Google Auth right now.

 

 

I expect some staff to disable MFA as strictly speaking staff are not allowed personal phones in the classroom.

 

If you have a static IP and Conditional Access you could not require MFA when signing in at school.

[Jobos]

 

If you have a static IP and Conditional Access you could not require MFA when signing in at school.

 

I was under the impression that to use conditional access a P1 licence was needed which the school does not have.

[robintech]

P1 is quite cheap £5ish per annum per faculty member (and you get students free I think or 1:15 ratio)