SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong...
Transcript of SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong...
![Page 1: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/1.jpg)
SURFconextStrongAuthenticationwithADFS4.0Testresults
Version1.1(23-10-2017)NickBoszhard(2AT)
![Page 2: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/2.jpg)
InhoudsopgaveChangelog...............................................................................................................................................7
Introduction.............................................................................................................................................8
Importantfindings...................................................................................................................................9
SURFconextStrongAuthenticationwithSMSverification...................................................................9
1. Windows10Client...................................................................................................................9
2. MacOSXclient.........................................................................................................................9
3. AppleiPhoneiOS11................................................................................................................9
4. AndroidPhone.........................................................................................................................9
SURFconextStrongAuthenticationwithTiqrverification..................................................................10
1. Windows10Client.................................................................................................................10
2. MacOSXclient.......................................................................................................................10
3. AppleiPhoneiOS11..............................................................................................................10
4. AndroidPhone.......................................................................................................................10
ThunderbirdandAppleMail..............................................................................................................11
InstallSURFconextStrongAuthenticationPluginonADFS4.0..............................................................12
EnableModernAuthenticationforExchangeandSkypeforBusiness...................................................16
Windows10ClientwithSMSauthentication.........................................................................................17
SkypeforBusiness.............................................................................................................................17
1. LogoffyourSkypeclient.........................................................................................................17
2. Removethelogoncredentials...............................................................................................17
3. Logonwithyourusernameagain...........................................................................................18
4. RequestSURFconextStrongAuthenticationcode.................................................................19
5. Enterthecodeyoureceived..................................................................................................19
6. YourloggedinwithSSA!........................................................................................................20
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................21
1. OpenMicrosoftOutlook........................................................................................................21
2. Logonwithyourcredentials..................................................................................................22
3. RequestSURFconextStrongAuthenticationcode.................................................................22
4. ConfirmSURFconextStrongAuthenticationcode.................................................................23
5. Youraccounthasbeenset-up!..............................................................................................23
SignintoyourOffice2016applications............................................................................................24
1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)..............................................24
2. Clickon‘Addaccount’............................................................................................................24
3. Enteryourusername.............................................................................................................25
![Page 3: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/3.jpg)
4. Enteryourpassword..............................................................................................................25
5. RequestaSURFconextStrongAuthenticationcode..............................................................26
6. ConfirmSURFconextStrongAuthenticationcode.................................................................26
7. Youloggedon!.......................................................................................................................27
LogononSharePointOnlinethroughbrowser...................................................................................28
1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................28
2. EnteryourcredentialsontheADFSlogonpage....................................................................28
3. RequestaSURFconextStrongAuthenticationcode..............................................................29
4. ConfirmSURFconextStrongAuthenticationcode.................................................................29
5. You’reloggedon!...................................................................................................................29
UseOneDrivewithSURFconextStrongAuthentication.....................................................................30
1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’............................30
2. Youwillbeprompted.Clickon‘allow’...................................................................................30
3. Clickon‘synchronizenow’.....................................................................................................31
4. UsenewOneDriveversion.....................................................................................................31
5. ConfigureOneDrive...............................................................................................................32
6. Entercredentials....................................................................................................................32
7. RequestaSURFconextStrongAuthenticationcode..............................................................33
8. ConfirmSURFconextStrongAuthenticationcode.................................................................33
9. OneDriveisconfigured..........................................................................................................34
10. Synchronizeyourfiles........................................................................................................35
11. OneDriveisreadyforuse...................................................................................................35
MacOSX12.6withSMSauthentication.................................................................................................36
SkypeforBusiness.............................................................................................................................36
1. Logonwithyourusernameandpassword.............................................................................36
2. LogonwithyourusernameandpasswordonADFS..............................................................36
3. RequestandvalidateaSURFconextStrongAuthenticationcode..........................................37
4. ConfirmSURFconextStrongAuthenticationcode.................................................................37
5. You’reloggedon!...................................................................................................................38
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................39
1. OpenMicrosoftOutlookandaddanaccount........................................................................39
2. Enteryouremailaddress.......................................................................................................39
3. OutlookwillconnecttoOffice365........................................................................................40
4. EnteryourADFScredentials.................................................................................................40
5. RequestandvalidateaSURFconextStrongAuthenticationcode..........................................41
![Page 4: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/4.jpg)
6. ConfirmSURFconextStrongAuthenticationcode.................................................................41
7. Youraccounthasbeenset-up!..............................................................................................42
SignintoyourOffice2016applications............................................................................................43
1. OpenyourOfficeapplicationandsignoffthecurrentuser...................................................43
2. Signinagainwithyouremailaddress....................................................................................43
3. SigninwithyourcredentialsonyourADFSpage..................................................................44
4. RequestaSURFconextStrongAuthenticationcode..............................................................44
5. ConfirmSURFconextStrongAuthenticationcode.................................................................45
6. You’resignedin!....................................................................................................................45
MicrosoftOutlookforiOS..................................................................................................................46
1. Addanewaccount................................................................................................................46
2. SigninwithyourcredentialsonyourADFSpage..................................................................46
3. RequestaSURFconextStrongAuthenticationcode..............................................................47
4. ConfirmSURFconextStrongAuthenticationcode.................................................................47
5. Youraccountisadded!..........................................................................................................48
OfficeappsforiOS.............................................................................................................................49
1. Addanewaccount................................................................................................................49
2. SigninwithyourcredentialsonyourADFSpage..................................................................49
3. RequestaSURFconextStrongAuthenticationcode..............................................................50
4. ConfirmSURFconextStrongAuthenticationcode.................................................................50
5. Youraccountisadded!..........................................................................................................51
MicrosoftOutlookforAndroid..........................................................................................................52
1. Addanewaccount................................................................................................................52
2. SigninwithyourcredentialsonyourADFSpage..................................................................52
3. RequestaSURFconextStrongAuthenticationcode..............................................................53
4. ConfirmSURFconextStrongAuthenticationcode.................................................................53
5. Youraccountisadded!..........................................................................................................54
Windows10ClientwithTiqrauthentication.........................................................................................55
SkypeforBusiness.............................................................................................................................55
1. LogoffyourSkypeclient.........................................................................................................55
2. Removethelogoncredentials...............................................................................................55
3. Logonwithyourusernameagain...........................................................................................56
4. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................57
5. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................57
6. YourloggedinwithSSA!........................................................................................................58
![Page 5: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/5.jpg)
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................59
1. OpenMicrosoftOutlook........................................................................................................59
2. Logonwithyourcredentials..................................................................................................60
3. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................60
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................61
5. Youraccounthasbeenset-up!..............................................................................................61
SignintoyourOffice2016applications............................................................................................62
1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)..............................................62
2. Clickon‘Addaccount’............................................................................................................62
3. Enteryourusername.............................................................................................................63
4. Enteryourpassword..............................................................................................................63
5. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................64
6. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................64
7. Youloggedon!.......................................................................................................................65
LogononSharePointOnlinethroughbrowser...................................................................................66
1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................66
2. EnteryourcredentialsontheADFSlogonpage....................................................................66
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................67
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................67
5. You’reloggedon!...................................................................................................................68
UseOneDrivewithSURFconextStrongAuthentication.....................................................................69
1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’............................69
2. Youwillbeprompted.Clickon‘allow’...................................................................................69
3. Clickon‘synchronizenow’.....................................................................................................70
4. UsenewOneDriveversion.....................................................................................................70
5. ConfigureOneDrive...............................................................................................................71
6. Entercredentials....................................................................................................................71
7. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................72
8. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................72
9. OneDriveisconfigured..........................................................................................................73
10. Synchronizeyourfiles........................................................................................................73
11. OneDriveisreadyforuse...................................................................................................74
MacOSX12.6withTiqrauthentication.................................................................................................75
SkypeforBusiness.............................................................................................................................75
1. Logonwithyourusernameandpassword.............................................................................75
![Page 6: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/6.jpg)
2. LogonwithyourusernameandpasswordonADFS..............................................................75
3. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr..............................76
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................76
5. You’reloggedon!...................................................................................................................77
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................78
1. OpenMicrosoftOutlook........................................................................................................78
2. Logonwithyourcredentials..................................................................................................79
3. Allowsettingretrieval............................................................................................................79
4. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr..............................80
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................80
6. ConfirmSURFconextStrongAuthenticationcode.................................................................81
SignintoyourOffice2016applications............................................................................................82
1. OpenyourOfficeapplicationandsignoffthecurrentuser...................................................82
2. Signinagainwithyouremailaddress....................................................................................82
3. SigninwithyourcredentialsonyourADFSpage..................................................................83
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................83
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................84
6. You’resignedin!....................................................................................................................84
LogononSharePointOnlinethroughbrowser...................................................................................85
1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................85
2. EnteryourcredentialsontheADFSlogonpage....................................................................85
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................86
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................86
5. You’reloggedon!...................................................................................................................86
MicrosoftOutlookforiOS..................................................................................................................87
1. Addanewaccount................................................................................................................87
2. LogononyourADFSpage.....................................................................................................87
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................88
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................88
5. Accountisadded!..................................................................................................................89
OfficeappsforiOS.............................................................................................................................90
1. Addanewaccount................................................................................................................90
2. LogontoyourADFSpage......................................................................................................90
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................91
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................91
![Page 7: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/7.jpg)
5. Youraccountisadded!..........................................................................................................92
MicrosoftOutlookforAndroid..........................................................................................................93
1. Addanewaccount................................................................................................................93
2. SigninwithyourcredentialsonyourADFSpage..................................................................93
3. SigninonyourADFSpage....................................................................................................94
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................94
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................95
6. Youraccountisadded!..........................................................................................................95
ChangelogWhen What Bywho 27October2017 Smalltextualchanges RaoulTeeuwen27October2017 Version1.0 NickBoszhard
![Page 8: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/8.jpg)
IntroductionThisdocumentismeanttoshowhowyouareabletouseseveralapplicationsandclientswithSURFconextStrongAuthenticationonADFS4.0.WetestedboththeSMSandTiqrverification.We’vedocumentedthestepsthatshouldbetakento:
- InstallSURFconextStrongAuthenticationPluginonADFS4.0- EnableModernAuthenticationonSkypeforBusinessandOutlookOnline- Configurethetestedappsandclients
We’vereportedthemostimportantfindingsinthisdocument.
Agraphicrepresentationofthetestsetupisshownbelow:
![Page 9: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/9.jpg)
ImportantfindingsThissectionwillshowthemostimportantfindingsbasedonthetests
SURFconextStrongAuthenticationwithSMSverification1. Windows10Client
Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”
2. MacOSXclientApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”AppleMail See“ThunderbirdandAppleMail”
3. AppleiPhoneiOS11Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
4. AndroidPhoneApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
![Page 10: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/10.jpg)
SURFconextStrongAuthenticationwithTiqrverification1. Windows10Client
Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”
2. MacOSXclientApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”AppleMail See“ThunderbirdandAppleMail”
3. AppleiPhoneiOS11Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
4. AndroidPhoneApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
![Page 11: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/11.jpg)
ThunderbirdandAppleMailForAppleMailandThunderbirdtoworkincombinationwithasecondfactoryoumustuseapplicationspecificpasswords.Tobeabletouseanapplicationspecificpassword,youneedtoenableMFAonOffice365foreveruserthatwantsthis.
IncaseyouuseSURFconextStrongAuthenticationandauserneedstouseapplicationspecificpasswords,forallapplicationswithoutapplicationspecificpasswords(forinstanceMicrosoftclients)theuserneedstoauthenticateviaSURFconextStrongAuthenticationandafterthatviaaMicrosoftMFA.Thissetuptechnicallyworks,butinstitutionsandusersneedtodecidewhetherthisisareasonablesolution.
Applicationspecificpasswordswillhavetobeusedfor(Microsoft)applicationsthatdonotsupportModernAuthentication.MicrosoftMFAcanbeenabledperuser,soenablingthiswouldn’thavetoaffectyourwholeorganization.
MoreinformationaboutMicrosoftapplicationstosupportModernAuthenticationcanbefoundhere:https://blogs.office.com/en-us/2015/11/19/updated-office-365-modern-authentication-public-preview/?eu=true
![Page 12: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/12.jpg)
InstallSURFconextStrongAuthenticationPluginonADFS4.0Gotohttps://github.com/SURFnet/ADFS-MFA-SAML2.0-ExtensionwhereyoucanfindtheSSAplugin.We’veusedtheprecompiledversionthatcouldbefoundathttps://github.com/SURFnet/ADFS-MFA-SAML2.0-Extension/releases/download/0.1/SetupPackage.zipWetestedthissetupwiththeSURFconextStrongAuthenticationPluginversion0.1.Amorerecentversion(0.2)isalsoavailableandcanbefoundhere:https://github.com/SURFnet/ADFS-MFA-SAML2.0-Extension/releases/download/0.2/SetupPackage-0.2.zipYouneedtounzipthisfileonyourADFSserverandedittheSurfnetMfaPluginConfiguration.jsonfile.{"Settings":{"AuthenticationServiceUrl":"https://sfo-gateway.pilot.stepup.surfconext.nl/authentication/initiate","SecondFactorEndpoint":"https://gateway.pilot.stepup.surfconext.nl/second-factor-only/single-sign-on","MinimalLoa":"http://pilot.surfconext.nl/assurance/sfo-level2","schacHomeOrganization":"YourschacHomeOrganization","ActiveDirectoryName":"YourADName","ActiveDirectoryUserIdAttribute":"ADUserIDAttribute"},"ServiceProvider":{"SigningCertificate":"signingcertificate(notneededwithasingleADFSserver","EntityId":"http://youradfsurl/adfs/services/trust","AssertionConsumerServiceUrl":"https://gateway.pilot.stepup.surfconext.nl/authenticate/consume-acs"},"IdentityProvider":{"EntityId":"https://gateway.pilot.stepup.surfconext.nl/second-factor-only/metadata","Certificate":"certificateacquiredfromSURFconext"}}ThenrunaPowerShellwindowsasanAdministratorandruntheInstall-SurfnetMfaPlugin.ps1file
![Page 13: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/13.jpg)
TheinstallationwillrunandyouwillhavetosendacertificateoutputtoSURFconext
OpenyourADFSmanagementwindowandsettheMulti-factorAuthenticationMethodstoADFS.SCSA
![Page 14: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/14.jpg)
EdittheAccessControlPolicyontherelyingPartyTrust,youwanttouse
YouareabletosetanaccesscontrolpolicyforyourMFA.WechosetosetMFAforonlyacertaingroup
![Page 15: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/15.jpg)
Youshouldnowbeabletologontohttps://selfservice.pilot.stepup.surfconext.nl/andregisteratoken(SMS,Tiqr.YouwillreceiveanactivationcodeinyouremailthatyouwillhavetoactivatewithsomeonefromSURFconext.
Afteryourregistration,youshouldbeabletologonwithSURFconextStrongAuthenticationandaverificationtoken.
![Page 16: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/16.jpg)
EnableModernAuthenticationforExchangeandSkypeforBusinessWhenthisdocumentwaswritten,MicrosofthasenabledModernAuthenticationforExchangeandSkypeforBusiness(SfB)bydefault.Butfortenantsthatarecreatedearlier,itisnotenabledbydefault.
InthisstepwewillshowyouhowtoenableModernAuthenticationforExchangeOnlineandSkypeforBusinessOnline.
ExchangeOnline#### To enable Windows PowerShell to run signed scripts, run the following command in an elevated Windows PowerShell window (a Windows PowerShell window you open by selecting Run as administrator): #### Set Execution Policy #### Set-ExecutionPolicy RemoteSigned #### Set User Credentials #### $UserCredential = Get-Credential #### Create Exchange Online session #### $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection #### Import the Exchange Online Session Import-PSSession $Session #### Set OAuth enabled to true #### Set-OrganizationConfig -OAuth2ClientProfileEnabled $true #### Check if the setting has been set correctly #### Get-OrganizationConfig | Format-Table -Auto Name,OAuth* #### Remove Exchange Online session #### Remove-PSSession $Session
SkypeforBusinessOnline
#### Download the SfB Online Powershell module from: https://www.microsoft.com/en-us/download/details.aspx?id=39366 #### Set User Credentials #### $credential = Get-Credential #### Create SfB Online session #### $session = New-CsOnlineSession -Credential $credential -Verbose #### Import the SfB Online Session Import-PSSession $session #### Set OAuth enabled to true/allowed #### Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed #### Check if the setting has been set correctly #### Get-CsOAuthConfiguration #### Remove SfB Online session #### Remove-PSSession $session
![Page 17: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/17.jpg)
Windows10ClientwithSMSauthenticationSkypeforBusiness
AfteryouenabledmodernauthenticationforSfB,youshouldbeabletologontoSkypewithSURFStrongAuthentication.Pleasefollowthestepsbeneath.
1. LogoffyourSkypeclient
2. Removethelogoncredentials
![Page 18: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/18.jpg)
3. Logonwithyourusernameagain
![Page 19: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/19.jpg)
4. RequestSURFconextStrongAuthenticationcode
5. Enterthecodeyoureceived
![Page 20: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/20.jpg)
6. YourloggedinwithSSA!
![Page 21: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/21.jpg)
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook
![Page 22: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/22.jpg)
2. Logonwithyourcredentials
3. RequestSURFconextStrongAuthenticationcode
![Page 23: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/23.jpg)
4. ConfirmSURFconextStrongAuthenticationcode
5. Youraccounthasbeenset-up!
![Page 24: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/24.jpg)
SignintoyourOffice2016applications1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)
2. Clickon‘Addaccount’
![Page 25: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/25.jpg)
3. Enteryourusername
4. Enteryourpassword
![Page 26: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/26.jpg)
5. RequestaSURFconextStrongAuthenticationcode
6. ConfirmSURFconextStrongAuthenticationcode
![Page 27: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/27.jpg)
7. Youloggedon!
![Page 28: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/28.jpg)
LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage
2. EnteryourcredentialsontheADFSlogonpage
![Page 29: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/29.jpg)
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. You’reloggedon!
![Page 30: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/30.jpg)
UseOneDrivewithSURFconextStrongAuthentication1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’
2. Youwillbeprompted.Clickon‘allow’
![Page 31: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/31.jpg)
3. Clickon‘synchronizenow’
4. UsenewOneDriveversion
![Page 32: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/32.jpg)
5. ConfigureOneDrive
6. Entercredentials
![Page 33: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/33.jpg)
7. RequestaSURFconextStrongAuthenticationcode
8. ConfirmSURFconextStrongAuthenticationcode
![Page 34: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/34.jpg)
9. OneDriveisconfigured
![Page 35: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/35.jpg)
10. Synchronizeyourfiles
11. OneDriveisreadyforuse
![Page 36: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/36.jpg)
MacOSX12.6withSMSauthenticationSkypeforBusiness
1. Logonwithyourusernameandpassword
2. LogonwithyourusernameandpasswordonADFS
![Page 37: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/37.jpg)
3. RequestandvalidateaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
![Page 38: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/38.jpg)
5. You’reloggedon!
![Page 39: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/39.jpg)
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlookandaddanaccount
2. Enteryouremailaddress
![Page 40: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/40.jpg)
3. OutlookwillconnecttoOffice365
4. EnteryourADFScredentials
![Page 41: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/41.jpg)
5. RequestandvalidateaSURFconextStrongAuthenticationcode
6. ConfirmSURFconextStrongAuthenticationcode
![Page 42: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/42.jpg)
7. Youraccounthasbeenset-up!
![Page 43: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/43.jpg)
SignintoyourOffice2016applications1. OpenyourOfficeapplicationandsignoffthecurrentuser
2. Signinagainwithyouremailaddress
![Page 44: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/44.jpg)
3. SigninwithyourcredentialsonyourADFSpage
4. RequestaSURFconextStrongAuthenticationcode
![Page 45: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/45.jpg)
5. ConfirmSURFconextStrongAuthenticationcode
6. You’resignedin!
![Page 46: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/46.jpg)
MicrosoftOutlookforiOS1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
![Page 47: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/47.jpg)
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
![Page 48: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/48.jpg)
5. Youraccountisadded!
![Page 49: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/49.jpg)
OfficeappsforiOS1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
![Page 50: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/50.jpg)
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
![Page 51: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/51.jpg)
5. Youraccountisadded!
![Page 52: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/52.jpg)
MicrosoftOutlookforAndroid1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
![Page 53: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/53.jpg)
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
![Page 54: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/54.jpg)
5. Youraccountisadded!
![Page 55: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/55.jpg)
Windows10ClientwithTiqrauthenticationSkypeforBusinessAfteryouenabledmodernauthenticationforSfB,youshouldbeabletologontoSkypewithSURFStrongAuthentication.Pleasefollowthestepsbeneath.
1. LogoffyourSkypeclient
2. Removethelogoncredentials
![Page 56: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/56.jpg)
3. Logonwithyourusernameagain
![Page 57: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/57.jpg)
4. RequestSURFconextStrongAuthenticationcodeviaTiqr
5. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
![Page 58: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/58.jpg)
6. YourloggedinwithSSA!
![Page 59: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/59.jpg)
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook
![Page 60: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/60.jpg)
2. Logonwithyourcredentials
3. RequestSURFconextStrongAuthenticationcodeviaTiqr
![Page 61: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/61.jpg)
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
5. Youraccounthasbeenset-up!
![Page 62: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/62.jpg)
SignintoyourOffice2016applications1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)
2. Clickon‘Addaccount’
![Page 63: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/63.jpg)
3. Enteryourusername
4. Enteryourpassword
![Page 64: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/64.jpg)
5. RequestSURFconextStrongAuthenticationcodeviaTiqr
6. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
![Page 65: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/65.jpg)
7. Youloggedon!
![Page 66: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/66.jpg)
LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage
2. EnteryourcredentialsontheADFSlogonpage
![Page 67: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/67.jpg)
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
![Page 68: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/68.jpg)
5. You’reloggedon!
![Page 69: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/69.jpg)
UseOneDrivewithSURFconextStrongAuthentication1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’
2. Youwillbeprompted.Clickon‘allow’
![Page 70: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/70.jpg)
3. Clickon‘synchronizenow’
4. UsenewOneDriveversion
![Page 71: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/71.jpg)
5. ConfigureOneDrive
6. Entercredentials
![Page 72: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/72.jpg)
7. RequestaSURFconextStrongAuthenticationcodeviaTiqr
8. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
![Page 73: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/73.jpg)
9. OneDriveisconfigured
10. Synchronizeyourfiles
![Page 74: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/74.jpg)
11. OneDriveisreadyforuse
![Page 75: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/75.jpg)
MacOSX12.6withTiqrauthenticationSkypeforBusiness
1. Logonwithyourusernameandpassword
2. LogonwithyourusernameandpasswordonADFS
![Page 76: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/76.jpg)
3. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
![Page 77: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/77.jpg)
5. You’reloggedon!
![Page 78: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/78.jpg)
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook
![Page 79: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/79.jpg)
2. Logonwithyourcredentials
3. Allowsettingretrieval
![Page 80: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/80.jpg)
4. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
![Page 81: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/81.jpg)
6. ConfirmSURFconextStrongAuthenticationcode
![Page 82: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/82.jpg)
SignintoyourOffice2016applications1. OpenyourOfficeapplicationandsignoffthecurrentuser
2. Signinagainwithyouremailaddress
![Page 83: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/83.jpg)
3. SigninwithyourcredentialsonyourADFSpage
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr
![Page 84: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/84.jpg)
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
6. You’resignedin!
![Page 85: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/85.jpg)
LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage
2. EnteryourcredentialsontheADFSlogonpage
![Page 86: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/86.jpg)
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
5. You’reloggedon!
![Page 87: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/87.jpg)
MicrosoftOutlookforiOS1. Addanewaccount
2. LogononyourADFSpage
![Page 88: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/88.jpg)
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
![Page 89: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/89.jpg)
5. Accountisadded!
![Page 90: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/90.jpg)
OfficeappsforiOS1. Addanewaccount
2. LogontoyourADFSpage
![Page 91: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/91.jpg)
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
![Page 92: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/92.jpg)
5. Youraccountisadded!
![Page 93: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/93.jpg)
MicrosoftOutlookforAndroid1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
![Page 94: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/94.jpg)
3. SigninonyourADFSpage
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr
![Page 95: SURFconext Strong Authentication with AD ... - wiki.surfnet.nl Sterke... · SURFconext Strong Authentication with AD FS 4.0 Test results Version 1.1 (23-10-2017) Nick Boszhard (2AT)](https://reader033.fdocuments.us/reader033/viewer/2022042023/5e7b98519bd94c39c02f7811/html5/thumbnails/95.jpg)
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
6. Youraccountisadded!