<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D54z00008zrFCnCAMOkta Classic EngineOkta Integration NetworkAnswered2024-06-02T09:01:34.000Z2023-03-28T15:31:59.000Z2023-06-15T12:53:10.000Z

AllanM.42527 (Customer) asked a question.

March 28, 2023 at 3:31 PM
Microsoft 365 security defaults

We recently (last month) implemented Okta Adaptive MFA, SSO, and IAM. We have On-Prem Active Directory (Hybrid) with a one-way sync to MS free tier of Azure AD using AD Connect. We also have Okta AD Agents syncing to Okta, with Delegated Authentication enabled. We installed the Okta App for O365 and Federated our O365 domains with Okta for Authentication and MFA. We are also in the process of moving several SAML integrated apps from Azure AD to Okta integrations.

 

This morning when opening MS 365 Admin portal I received a notification that MS will automatically enable security defaults on our tenant, which apparently includes prompting our users to register MS Authenticator for MFA. All of our users currently have MFA enabled in Azure AD, which sends them to Okta.

 

See: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults.

 

I am trying to find out how / if this will affect our Okta deployment, and what the recommended security settings are for M365 and Okta. Any insights would be appreciated.

 

Thank You,

Allan

  • 5 answers
  • 864 views

  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @AllanM.42527 (Customer)​ 

     

    Thank you for posting on our Community page!

     

    We can’t speculate on what happens next, I guess the best course of action would be to ask the Microsoft community for more insight on this.

     

    Thank you for reaching out to our Community and have a great day!

     

    _____________________________________________________________________________

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

    Expand Post
    Selected as Best

  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @AllanM.42527 (Customer)​ 

     

    Thank you for posting on our Community page!

     

    We can’t speculate on what happens next, I guess the best course of action would be to ask the Microsoft community for more insight on this.

     

    Thank you for reaching out to our Community and have a great day!

     

    _____________________________________________________________________________

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

    Expand Post
    Selected as Best

  • iu9ip (iu9ip)

    Hello Allan,

     

    Do you have any Update?

    Did it conflict with Okta?

    Thx

    • AllanM.42527 (Customer)

      Hi Daniel,

       

      We never received a good answer. We did enable the MS 365 security defaults a couple of weeks ago. So far there has been no noticeable effect on MS 365 and our Okta implementation.

       

      Take Care,

      Allan

      Expand Post

  • iu9ip (iu9ip)

    Hello Allan

     

    Thank you for your Quick answer,

    this helps a lot. I made contact to Microsoft Support and am waiting for a response.

    Thanks Alot,

    Dani

    Expand Post

  • JasonN.29484 (Customer)

    What was the outcome? We have had a communication from Microsoft that the "Security defaults" will be enabled on our tenant at the end of June. Currently we have this set to disabled but our AD is federated to Okta with Okta MFA. I am trying to understand the impact, if any, on our sign in experience when this is enabled.

     

    Expand Post
This question is closed.
Loading
Microsoft 365 security defaults