{"id":1264,"date":"2017-07-26T17:43:08","date_gmt":"2017-07-26T16:43:08","guid":{"rendered":"http:\/\/www.myfatblog.co.uk\/?p=1264"},"modified":"2017-07-27T08:47:15","modified_gmt":"2017-07-27T07:47:15","slug":"microsoft-teams-office-365-proplus-activation-and-adfs","status":"publish","type":"post","link":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/","title":{"rendered":"Modern Authentication Issues &#8211; Microsoft Teams, Office 365 ProPlus activation and ADFS"},"content":{"rendered":"<p>Just recently, I hit an issue at a client where the Office 365 ProPlus installation could be activated on a device that was outside of the corporate network, but not when it was inside. We eventually traced the problem to the split configuration of ADFS and the fact that Forms based logon was disabled for internal connections. Once this was enabled on the Intranet connection, Modern Authentication occurred correctly and the software activated ok.<\/p>\n<p>I decided to test this further in my Azure set-up and was able to re-create the issue using the Teams app on my desktop PC when connecting to my ADFS server in Azure for authentication <strong><em>(In this case I don&#8217;t have the same split DNS configuration, so ADFS treats all connections as Intranet connections, purely to save Azure costs and not recommended!).<\/em><\/strong><\/p>\n<p>Opening the Teams app in Windows 10, I get the usual logon dialog box appear which I type my username into and hit tab. This automatically redirects me to my ADFS farm for validation, at which point we hit an error!<\/p>\n<p><a href=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image001-1.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border: 0px;\" title=\"clip_image001\" src=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image001_thumb-1.png\" alt=\"clip_image001\" width=\"666\" height=\"379\" border=\"0\" \/><\/a><\/p>\n<p>Not much useful info in that &#8220;An error occurred&#8221;\u00a0error message you&#8217;ll agree, but then teams shows us a short error message stating that &#8220;<em>Modern Authentication failed here<\/em>&#8221; before showing us a browser based logon screen for us to enter our username again.<\/p>\n<p><a href=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002-1.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border: 0px;\" title=\"clip_image002\" src=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png\" alt=\"clip_image002\" width=\"450\" height=\"363\" border=\"0\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image003.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border: 0px;\" title=\"clip_image003\" src=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image003_thumb.png\" alt=\"clip_image003\" width=\"439\" height=\"260\" border=\"0\" \/><\/a><\/p>\n<p>Once we&#8217;ve added our credentials again, it&#8217;s off round the federation loop once more, this time authenticating properly against the domain (and not using modern authentication) and gaining access to our Teams application. Overall not a great experience for your users and one that we need to fix. Luckily it&#8217;s a simple fix and just needs a minor change on your ADFS farm.<\/p>\n<p>Logon to your ADFS master server and open the AD FS Management console. Click on Authentication Policies and on &#8220;Primary Authentication\/Global Settings&#8221; click Edit.<\/p>\n<p><a href=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/PrimaryAuth.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-1266 size-full\" src=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/PrimaryAuth.jpg\" alt=\"\" width=\"578\" height=\"290\" srcset=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/PrimaryAuth.jpg 578w, http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/PrimaryAuth-300x151.jpg 300w\" sizes=\"(max-width: 578px) 100vw, 578px\" \/><\/a><\/p>\n<p>You&#8217;ll notice that by default, Forms authentication is not enabled for Intranet connections. Tick this box and click ok.<\/p>\n<p><a href=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image004.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border: 0px;\" title=\"clip_image004\" src=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image004_thumb.png\" alt=\"clip_image004\" width=\"410\" height=\"528\" border=\"0\" \/><\/a><\/p>\n<p>With that done, Office 365 ProPlus activation and logon to the Teams client app will work just happily and your users will be none the wiser.<\/p>\n<p>Paul.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Just recently, I hit an issue at a client where the Office 365 ProPlus installation could be activated on a device that was outside of the corporate network, but not when it was inside. We eventually traced the problem to the split configuration of ADFS and the fact that Forms based logon was disabled for &hellip; <\/p>\n<p><a class=\"more-link btn\" href=\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/\">Continue reading<\/a><\/p>\n","protected":false},"author":2,"featured_media":1259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[231,232],"tags":[233,69,226,234],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Modern Authentication Issues - Microsoft Teams, Office 365 ProPlus activation and ADFS - Blog of an overweight SharePoint addict<\/title>\n<meta name=\"description\" content=\"Using Modern authentication with ADFS can sometimes be problematical with the default install of ADFS. This article highlights the fix required to get in!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Modern Authentication Issues - Microsoft Teams, Office 365 ProPlus activation and ADFS - Blog of an overweight SharePoint addict\" \/>\n<meta property=\"og:description\" content=\"Using Modern authentication with ADFS can sometimes be problematical with the default install of ADFS. This article highlights the fix required to get in!\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog of an overweight SharePoint addict\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-26T16:43:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-07-27T07:47:15+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"450\" \/>\n\t<meta property=\"og:image:height\" content=\"363\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Cimares\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cimares\" \/>\n<meta name=\"twitter:site\" content=\"@cimares\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cimares\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/\",\"url\":\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/\",\"name\":\"Modern Authentication Issues - Microsoft Teams, Office 365 ProPlus activation and ADFS - Blog of an overweight SharePoint addict\",\"isPartOf\":{\"@id\":\"http:\/\/www.myfatblog.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/#primaryimage\"},\"image\":{\"@id\":\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png\",\"datePublished\":\"2017-07-26T16:43:08+00:00\",\"dateModified\":\"2017-07-27T07:47:15+00:00\",\"author\":{\"@id\":\"http:\/\/www.myfatblog.co.uk\/#\/schema\/person\/55ae8f6885bb5b8390dad001f3da83c6\"},\"description\":\"Using Modern authentication with ADFS can sometimes be problematical with the default install of ADFS. This article highlights the fix required to get in!\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/#primaryimage\",\"url\":\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png\",\"contentUrl\":\"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png\",\"width\":450,\"height\":363},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/www.myfatblog.co.uk\/#website\",\"url\":\"http:\/\/www.myfatblog.co.uk\/\",\"name\":\"Blog of an overweight SharePoint addict\",\"description\":\"The rantings of a (not so) food obsessed IT consultant!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/www.myfatblog.co.uk\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\/\/www.myfatblog.co.uk\/#\/schema\/person\/55ae8f6885bb5b8390dad001f3da83c6\",\"name\":\"Cimares\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/www.myfatblog.co.uk\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/www.myfatblog.co.uk\/images\/BlogImages\/About_D057\/TopOfTheWorld.jpg\",\"contentUrl\":\"http:\/\/www.myfatblog.co.uk\/images\/BlogImages\/About_D057\/TopOfTheWorld.jpg\",\"caption\":\"Cimares\"},\"sameAs\":[\"http:\/\/www.myfatblog.co.uk\"],\"url\":\"http:\/\/www.myfatblog.co.uk\/index.php\/author\/reginald\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Modern Authentication Issues - Microsoft Teams, Office 365 ProPlus activation and ADFS - Blog of an overweight SharePoint addict","description":"Using Modern authentication with ADFS can sometimes be problematical with the default install of ADFS. This article highlights the fix required to get in!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/","og_locale":"en_US","og_type":"article","og_title":"Modern Authentication Issues - Microsoft Teams, Office 365 ProPlus activation and ADFS - Blog of an overweight SharePoint addict","og_description":"Using Modern authentication with ADFS can sometimes be problematical with the default install of ADFS. This article highlights the fix required to get in!","og_url":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/","og_site_name":"Blog of an overweight SharePoint addict","article_published_time":"2017-07-26T16:43:08+00:00","article_modified_time":"2017-07-27T07:47:15+00:00","og_image":[{"width":450,"height":363,"url":"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png","type":"image\/png"}],"author":"Cimares","twitter_card":"summary_large_image","twitter_creator":"@cimares","twitter_site":"@cimares","twitter_misc":{"Written by":"Cimares","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/","url":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/","name":"Modern Authentication Issues - Microsoft Teams, Office 365 ProPlus activation and ADFS - Blog of an overweight SharePoint addict","isPartOf":{"@id":"http:\/\/www.myfatblog.co.uk\/#website"},"primaryImageOfPage":{"@id":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/#primaryimage"},"image":{"@id":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/#primaryimage"},"thumbnailUrl":"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png","datePublished":"2017-07-26T16:43:08+00:00","dateModified":"2017-07-27T07:47:15+00:00","author":{"@id":"http:\/\/www.myfatblog.co.uk\/#\/schema\/person\/55ae8f6885bb5b8390dad001f3da83c6"},"description":"Using Modern authentication with ADFS can sometimes be problematical with the default install of ADFS. This article highlights the fix required to get in!","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/www.myfatblog.co.uk\/index.php\/2017\/07\/microsoft-teams-office-365-proplus-activation-and-adfs\/#primaryimage","url":"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png","contentUrl":"http:\/\/www.myfatblog.co.uk\/wp-content\/uploads\/2017\/07\/clip_image002_thumb-1.png","width":450,"height":363},{"@type":"WebSite","@id":"http:\/\/www.myfatblog.co.uk\/#website","url":"http:\/\/www.myfatblog.co.uk\/","name":"Blog of an overweight SharePoint addict","description":"The rantings of a (not so) food obsessed IT consultant!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/www.myfatblog.co.uk\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/www.myfatblog.co.uk\/#\/schema\/person\/55ae8f6885bb5b8390dad001f3da83c6","name":"Cimares","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/www.myfatblog.co.uk\/#\/schema\/person\/image\/","url":"http:\/\/www.myfatblog.co.uk\/images\/BlogImages\/About_D057\/TopOfTheWorld.jpg","contentUrl":"http:\/\/www.myfatblog.co.uk\/images\/BlogImages\/About_D057\/TopOfTheWorld.jpg","caption":"Cimares"},"sameAs":["http:\/\/www.myfatblog.co.uk"],"url":"http:\/\/www.myfatblog.co.uk\/index.php\/author\/reginald\/"}]}},"_links":{"self":[{"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1264"}],"collection":[{"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=1264"}],"version-history":[{"count":4,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1264\/revisions"}],"predecessor-version":[{"id":1269,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/1264\/revisions\/1269"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/media\/1259"}],"wp:attachment":[{"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=1264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=1264"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.myfatblog.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=1264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}