Authentication to Office 365, Outlook and Azure MFA (Multifactor Authentication)

Authentication to Office 365 and Outlook

The sign-in format to access any Microsoft Online service is going to be:   JHED@jh.edu

Below is an example of a Microsoft modernized authentication window when attempting to access to an Exchange Online mailbox.  If MFA is required, you may see another authentication prompt after attempting to sign-in.

cid:image003.jpg@01D587E8.B16B7670

Below is an example of a legacy authentication prompt that you may notice as well.  This authentication prompt is in the process of being retired and transitioned to Microsoft’s modernized authentication prompts.

 

Azure MFA

All mailboxes will have an Azure MFA authentication policy applied.

  • Users and Service Accounts are NOT required to have MFA when internal to a Johns Hopkins network.
  • User mailboxes will require MFA every 30 days when accessing their Exchange Online mailbox from an external location.
  • Service mailboxes will be denied access from an external location when using the service account credentials, unless an exception is made.
    • Users can access service accounts from an external location when a service account is added as a secondary account and the user has full/delegate permission to the service mailbox.
  • To avoid the MFA requirement for mobile devices, a device can be enrolled into JH Intune.