When integrating Office 365 with Okta and Microsoft Intune, authentication attempts are blocked. One or both of the following events may appear in the system log:

DisplayMessage - Deny user access due to app sign on policy
EventType - application.policy.sign_on.deny_access

 

• Application Sign-On Policy
• Microsoft Intune
• Okta Classic Engine

The default Okta Application Sign On Policy blocks Legacy Authentication. Configure a Sign On Policy to allow Legacy Authentication using the procedure detailed in About app sign-on policies.

1. Navigate to the Office 365 application within the Okta Admin Console.
2. Select Sign-on.
3. Scroll to Application Sign-On policies.
4. To modify an existing rule click Edit(Pencil Icon), or to add a new Rule by clicking on Add Rule.
5. Enable Exchange ActiveSync/Legacy Auth.
6. In the Access section, ensure When all the conditions above are met, sign on to this application is option is set to Allowed.