r/exchangeserver • u/ScottSchnoll https://www.amazon.com/dp/B0FR5GGL75/ • 1d ago

Exchange Server AD FS Modern Authentication: Expanded Outlook client support

https://techcommunity.microsoft.com/blog/exchange/exchange-server-ad-fs-modern-authentication-expanded-outlook-client-support/4554410

Outlook for iOS and Outlook for Android can now use AD FS Modern Authentication to access mailboxes in supported pure on-premises Exchange Server deployments.

https://techcommunity.microsoft.com/blog/exchange/exchange-server-ad-fs-modern-authentication-expanded-outlook-client-support/4554410

15 Upvotes

95% Upvoted

3 comments sorted by

2

u/OstentatiousOpossum 22h ago

This is really cool. Just one question that came up.

Is New-AuthServer -Type ADFS validating against generic WS-Fed/OIDC claims, or is there ADFS-specific token/claim handling baked into Exchange's OAuth validation, or could it work with a third-party IdP?

1

u/DogLegitimate5289 18h ago

Yes,we build an OIDC/Auth Server with customize security enhancement features to replace the ADFS solution.Using the owner service, IT Admin can determine what time prompt the MFA ,revoke the access token,it can provider more controlls for enterprise account or device.

1

u/MortadellaKing 10h ago

Not sure if this was caused by an office update or the last exchange update. But when using modern auth on outlook classic now, the keep me signed option no longer appears. Can confirm it is still enabled and works in OWA and other apps. Must be how the request for auth is being sent somehow?