surfconext strong authentication with ad ... - wiki.surfnet.nl sterke... · surfconext strong...
TRANSCRIPT
SURFconextStrongAuthenticationwithADFS4.0Testresults
Version1.1(23-10-2017)NickBoszhard(2AT)
InhoudsopgaveChangelog...............................................................................................................................................7
Introduction.............................................................................................................................................8
Importantfindings...................................................................................................................................9
SURFconextStrongAuthenticationwithSMSverification...................................................................9
1. Windows10Client...................................................................................................................9
2. MacOSXclient.........................................................................................................................9
3. AppleiPhoneiOS11................................................................................................................9
4. AndroidPhone.........................................................................................................................9
SURFconextStrongAuthenticationwithTiqrverification..................................................................10
1. Windows10Client.................................................................................................................10
2. MacOSXclient.......................................................................................................................10
3. AppleiPhoneiOS11..............................................................................................................10
4. AndroidPhone.......................................................................................................................10
ThunderbirdandAppleMail..............................................................................................................11
InstallSURFconextStrongAuthenticationPluginonADFS4.0..............................................................12
EnableModernAuthenticationforExchangeandSkypeforBusiness...................................................16
Windows10ClientwithSMSauthentication.........................................................................................17
SkypeforBusiness.............................................................................................................................17
1. LogoffyourSkypeclient.........................................................................................................17
2. Removethelogoncredentials...............................................................................................17
3. Logonwithyourusernameagain...........................................................................................18
4. RequestSURFconextStrongAuthenticationcode.................................................................19
5. Enterthecodeyoureceived..................................................................................................19
6. YourloggedinwithSSA!........................................................................................................20
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................21
1. OpenMicrosoftOutlook........................................................................................................21
2. Logonwithyourcredentials..................................................................................................22
3. RequestSURFconextStrongAuthenticationcode.................................................................22
4. ConfirmSURFconextStrongAuthenticationcode.................................................................23
5. Youraccounthasbeenset-up!..............................................................................................23
SignintoyourOffice2016applications............................................................................................24
1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)..............................................24
2. Clickon‘Addaccount’............................................................................................................24
3. Enteryourusername.............................................................................................................25
4. Enteryourpassword..............................................................................................................25
5. RequestaSURFconextStrongAuthenticationcode..............................................................26
6. ConfirmSURFconextStrongAuthenticationcode.................................................................26
7. Youloggedon!.......................................................................................................................27
LogononSharePointOnlinethroughbrowser...................................................................................28
1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................28
2. EnteryourcredentialsontheADFSlogonpage....................................................................28
3. RequestaSURFconextStrongAuthenticationcode..............................................................29
4. ConfirmSURFconextStrongAuthenticationcode.................................................................29
5. You’reloggedon!...................................................................................................................29
UseOneDrivewithSURFconextStrongAuthentication.....................................................................30
1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’............................30
2. Youwillbeprompted.Clickon‘allow’...................................................................................30
3. Clickon‘synchronizenow’.....................................................................................................31
4. UsenewOneDriveversion.....................................................................................................31
5. ConfigureOneDrive...............................................................................................................32
6. Entercredentials....................................................................................................................32
7. RequestaSURFconextStrongAuthenticationcode..............................................................33
8. ConfirmSURFconextStrongAuthenticationcode.................................................................33
9. OneDriveisconfigured..........................................................................................................34
10. Synchronizeyourfiles........................................................................................................35
11. OneDriveisreadyforuse...................................................................................................35
MacOSX12.6withSMSauthentication.................................................................................................36
SkypeforBusiness.............................................................................................................................36
1. Logonwithyourusernameandpassword.............................................................................36
2. LogonwithyourusernameandpasswordonADFS..............................................................36
3. RequestandvalidateaSURFconextStrongAuthenticationcode..........................................37
4. ConfirmSURFconextStrongAuthenticationcode.................................................................37
5. You’reloggedon!...................................................................................................................38
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................39
1. OpenMicrosoftOutlookandaddanaccount........................................................................39
2. Enteryouremailaddress.......................................................................................................39
3. OutlookwillconnecttoOffice365........................................................................................40
4. EnteryourADFScredentials.................................................................................................40
5. RequestandvalidateaSURFconextStrongAuthenticationcode..........................................41
6. ConfirmSURFconextStrongAuthenticationcode.................................................................41
7. Youraccounthasbeenset-up!..............................................................................................42
SignintoyourOffice2016applications............................................................................................43
1. OpenyourOfficeapplicationandsignoffthecurrentuser...................................................43
2. Signinagainwithyouremailaddress....................................................................................43
3. SigninwithyourcredentialsonyourADFSpage..................................................................44
4. RequestaSURFconextStrongAuthenticationcode..............................................................44
5. ConfirmSURFconextStrongAuthenticationcode.................................................................45
6. You’resignedin!....................................................................................................................45
MicrosoftOutlookforiOS..................................................................................................................46
1. Addanewaccount................................................................................................................46
2. SigninwithyourcredentialsonyourADFSpage..................................................................46
3. RequestaSURFconextStrongAuthenticationcode..............................................................47
4. ConfirmSURFconextStrongAuthenticationcode.................................................................47
5. Youraccountisadded!..........................................................................................................48
OfficeappsforiOS.............................................................................................................................49
1. Addanewaccount................................................................................................................49
2. SigninwithyourcredentialsonyourADFSpage..................................................................49
3. RequestaSURFconextStrongAuthenticationcode..............................................................50
4. ConfirmSURFconextStrongAuthenticationcode.................................................................50
5. Youraccountisadded!..........................................................................................................51
MicrosoftOutlookforAndroid..........................................................................................................52
1. Addanewaccount................................................................................................................52
2. SigninwithyourcredentialsonyourADFSpage..................................................................52
3. RequestaSURFconextStrongAuthenticationcode..............................................................53
4. ConfirmSURFconextStrongAuthenticationcode.................................................................53
5. Youraccountisadded!..........................................................................................................54
Windows10ClientwithTiqrauthentication.........................................................................................55
SkypeforBusiness.............................................................................................................................55
1. LogoffyourSkypeclient.........................................................................................................55
2. Removethelogoncredentials...............................................................................................55
3. Logonwithyourusernameagain...........................................................................................56
4. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................57
5. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................57
6. YourloggedinwithSSA!........................................................................................................58
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................59
1. OpenMicrosoftOutlook........................................................................................................59
2. Logonwithyourcredentials..................................................................................................60
3. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................60
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................61
5. Youraccounthasbeenset-up!..............................................................................................61
SignintoyourOffice2016applications............................................................................................62
1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)..............................................62
2. Clickon‘Addaccount’............................................................................................................62
3. Enteryourusername.............................................................................................................63
4. Enteryourpassword..............................................................................................................63
5. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................64
6. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................64
7. Youloggedon!.......................................................................................................................65
LogononSharePointOnlinethroughbrowser...................................................................................66
1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................66
2. EnteryourcredentialsontheADFSlogonpage....................................................................66
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................67
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................67
5. You’reloggedon!...................................................................................................................68
UseOneDrivewithSURFconextStrongAuthentication.....................................................................69
1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’............................69
2. Youwillbeprompted.Clickon‘allow’...................................................................................69
3. Clickon‘synchronizenow’.....................................................................................................70
4. UsenewOneDriveversion.....................................................................................................70
5. ConfigureOneDrive...............................................................................................................71
6. Entercredentials....................................................................................................................71
7. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................72
8. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................72
9. OneDriveisconfigured..........................................................................................................73
10. Synchronizeyourfiles........................................................................................................73
11. OneDriveisreadyforuse...................................................................................................74
MacOSX12.6withTiqrauthentication.................................................................................................75
SkypeforBusiness.............................................................................................................................75
1. Logonwithyourusernameandpassword.............................................................................75
2. LogonwithyourusernameandpasswordonADFS..............................................................75
3. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr..............................76
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................76
5. You’reloggedon!...................................................................................................................77
(Re)addyouraccounttoMicrosoftOutlook.....................................................................................78
1. OpenMicrosoftOutlook........................................................................................................78
2. Logonwithyourcredentials..................................................................................................79
3. Allowsettingretrieval............................................................................................................79
4. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr..............................80
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................80
6. ConfirmSURFconextStrongAuthenticationcode.................................................................81
SignintoyourOffice2016applications............................................................................................82
1. OpenyourOfficeapplicationandsignoffthecurrentuser...................................................82
2. Signinagainwithyouremailaddress....................................................................................82
3. SigninwithyourcredentialsonyourADFSpage..................................................................83
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................83
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................84
6. You’resignedin!....................................................................................................................84
LogononSharePointOnlinethroughbrowser...................................................................................85
1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................85
2. EnteryourcredentialsontheADFSlogonpage....................................................................85
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................86
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................86
5. You’reloggedon!...................................................................................................................86
MicrosoftOutlookforiOS..................................................................................................................87
1. Addanewaccount................................................................................................................87
2. LogononyourADFSpage.....................................................................................................87
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................88
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................88
5. Accountisadded!..................................................................................................................89
OfficeappsforiOS.............................................................................................................................90
1. Addanewaccount................................................................................................................90
2. LogontoyourADFSpage......................................................................................................90
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................91
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................91
5. Youraccountisadded!..........................................................................................................92
MicrosoftOutlookforAndroid..........................................................................................................93
1. Addanewaccount................................................................................................................93
2. SigninwithyourcredentialsonyourADFSpage..................................................................93
3. SigninonyourADFSpage....................................................................................................94
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................94
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................95
6. Youraccountisadded!..........................................................................................................95
ChangelogWhen What Bywho 27October2017 Smalltextualchanges RaoulTeeuwen27October2017 Version1.0 NickBoszhard
IntroductionThisdocumentismeanttoshowhowyouareabletouseseveralapplicationsandclientswithSURFconextStrongAuthenticationonADFS4.0.WetestedboththeSMSandTiqrverification.We’vedocumentedthestepsthatshouldbetakento:
- InstallSURFconextStrongAuthenticationPluginonADFS4.0- EnableModernAuthenticationonSkypeforBusinessandOutlookOnline- Configurethetestedappsandclients
We’vereportedthemostimportantfindingsinthisdocument.
Agraphicrepresentationofthetestsetupisshownbelow:
ImportantfindingsThissectionwillshowthemostimportantfindingsbasedonthetests
SURFconextStrongAuthenticationwithSMSverification1. Windows10Client
Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”
2. MacOSXclientApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”AppleMail See“ThunderbirdandAppleMail”
3. AppleiPhoneiOS11Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
4. AndroidPhoneApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
SURFconextStrongAuthenticationwithTiqrverification1. Windows10Client
Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”
2. MacOSXclientApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”AppleMail See“ThunderbirdandAppleMail”
3. AppleiPhoneiOS11Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
4. AndroidPhoneApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness
ThunderbirdandAppleMailForAppleMailandThunderbirdtoworkincombinationwithasecondfactoryoumustuseapplicationspecificpasswords.Tobeabletouseanapplicationspecificpassword,youneedtoenableMFAonOffice365foreveruserthatwantsthis.
IncaseyouuseSURFconextStrongAuthenticationandauserneedstouseapplicationspecificpasswords,forallapplicationswithoutapplicationspecificpasswords(forinstanceMicrosoftclients)theuserneedstoauthenticateviaSURFconextStrongAuthenticationandafterthatviaaMicrosoftMFA.Thissetuptechnicallyworks,butinstitutionsandusersneedtodecidewhetherthisisareasonablesolution.
Applicationspecificpasswordswillhavetobeusedfor(Microsoft)applicationsthatdonotsupportModernAuthentication.MicrosoftMFAcanbeenabledperuser,soenablingthiswouldn’thavetoaffectyourwholeorganization.
MoreinformationaboutMicrosoftapplicationstosupportModernAuthenticationcanbefoundhere:https://blogs.office.com/en-us/2015/11/19/updated-office-365-modern-authentication-public-preview/?eu=true
InstallSURFconextStrongAuthenticationPluginonADFS4.0Gotohttps://github.com/SURFnet/ADFS-MFA-SAML2.0-ExtensionwhereyoucanfindtheSSAplugin.We’veusedtheprecompiledversionthatcouldbefoundathttps://github.com/SURFnet/ADFS-MFA-SAML2.0-Extension/releases/download/0.1/SetupPackage.zipWetestedthissetupwiththeSURFconextStrongAuthenticationPluginversion0.1.Amorerecentversion(0.2)isalsoavailableandcanbefoundhere:https://github.com/SURFnet/ADFS-MFA-SAML2.0-Extension/releases/download/0.2/SetupPackage-0.2.zipYouneedtounzipthisfileonyourADFSserverandedittheSurfnetMfaPluginConfiguration.jsonfile.{"Settings":{"AuthenticationServiceUrl":"https://sfo-gateway.pilot.stepup.surfconext.nl/authentication/initiate","SecondFactorEndpoint":"https://gateway.pilot.stepup.surfconext.nl/second-factor-only/single-sign-on","MinimalLoa":"http://pilot.surfconext.nl/assurance/sfo-level2","schacHomeOrganization":"YourschacHomeOrganization","ActiveDirectoryName":"YourADName","ActiveDirectoryUserIdAttribute":"ADUserIDAttribute"},"ServiceProvider":{"SigningCertificate":"signingcertificate(notneededwithasingleADFSserver","EntityId":"http://youradfsurl/adfs/services/trust","AssertionConsumerServiceUrl":"https://gateway.pilot.stepup.surfconext.nl/authenticate/consume-acs"},"IdentityProvider":{"EntityId":"https://gateway.pilot.stepup.surfconext.nl/second-factor-only/metadata","Certificate":"certificateacquiredfromSURFconext"}}ThenrunaPowerShellwindowsasanAdministratorandruntheInstall-SurfnetMfaPlugin.ps1file
TheinstallationwillrunandyouwillhavetosendacertificateoutputtoSURFconext
OpenyourADFSmanagementwindowandsettheMulti-factorAuthenticationMethodstoADFS.SCSA
EdittheAccessControlPolicyontherelyingPartyTrust,youwanttouse
YouareabletosetanaccesscontrolpolicyforyourMFA.WechosetosetMFAforonlyacertaingroup
Youshouldnowbeabletologontohttps://selfservice.pilot.stepup.surfconext.nl/andregisteratoken(SMS,Tiqr.YouwillreceiveanactivationcodeinyouremailthatyouwillhavetoactivatewithsomeonefromSURFconext.
Afteryourregistration,youshouldbeabletologonwithSURFconextStrongAuthenticationandaverificationtoken.
EnableModernAuthenticationforExchangeandSkypeforBusinessWhenthisdocumentwaswritten,MicrosofthasenabledModernAuthenticationforExchangeandSkypeforBusiness(SfB)bydefault.Butfortenantsthatarecreatedearlier,itisnotenabledbydefault.
InthisstepwewillshowyouhowtoenableModernAuthenticationforExchangeOnlineandSkypeforBusinessOnline.
ExchangeOnline#### To enable Windows PowerShell to run signed scripts, run the following command in an elevated Windows PowerShell window (a Windows PowerShell window you open by selecting Run as administrator): #### Set Execution Policy #### Set-ExecutionPolicy RemoteSigned #### Set User Credentials #### $UserCredential = Get-Credential #### Create Exchange Online session #### $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection #### Import the Exchange Online Session Import-PSSession $Session #### Set OAuth enabled to true #### Set-OrganizationConfig -OAuth2ClientProfileEnabled $true #### Check if the setting has been set correctly #### Get-OrganizationConfig | Format-Table -Auto Name,OAuth* #### Remove Exchange Online session #### Remove-PSSession $Session
SkypeforBusinessOnline
#### Download the SfB Online Powershell module from: https://www.microsoft.com/en-us/download/details.aspx?id=39366 #### Set User Credentials #### $credential = Get-Credential #### Create SfB Online session #### $session = New-CsOnlineSession -Credential $credential -Verbose #### Import the SfB Online Session Import-PSSession $session #### Set OAuth enabled to true/allowed #### Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed #### Check if the setting has been set correctly #### Get-CsOAuthConfiguration #### Remove SfB Online session #### Remove-PSSession $session
Windows10ClientwithSMSauthenticationSkypeforBusiness
AfteryouenabledmodernauthenticationforSfB,youshouldbeabletologontoSkypewithSURFStrongAuthentication.Pleasefollowthestepsbeneath.
1. LogoffyourSkypeclient
2. Removethelogoncredentials
3. Logonwithyourusernameagain
4. RequestSURFconextStrongAuthenticationcode
5. Enterthecodeyoureceived
6. YourloggedinwithSSA!
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook
2. Logonwithyourcredentials
3. RequestSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. Youraccounthasbeenset-up!
SignintoyourOffice2016applications1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)
2. Clickon‘Addaccount’
3. Enteryourusername
4. Enteryourpassword
5. RequestaSURFconextStrongAuthenticationcode
6. ConfirmSURFconextStrongAuthenticationcode
7. Youloggedon!
LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage
2. EnteryourcredentialsontheADFSlogonpage
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. You’reloggedon!
UseOneDrivewithSURFconextStrongAuthentication1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’
2. Youwillbeprompted.Clickon‘allow’
3. Clickon‘synchronizenow’
4. UsenewOneDriveversion
5. ConfigureOneDrive
6. Entercredentials
7. RequestaSURFconextStrongAuthenticationcode
8. ConfirmSURFconextStrongAuthenticationcode
9. OneDriveisconfigured
10. Synchronizeyourfiles
11. OneDriveisreadyforuse
MacOSX12.6withSMSauthenticationSkypeforBusiness
1. Logonwithyourusernameandpassword
2. LogonwithyourusernameandpasswordonADFS
3. RequestandvalidateaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. You’reloggedon!
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlookandaddanaccount
2. Enteryouremailaddress
3. OutlookwillconnecttoOffice365
4. EnteryourADFScredentials
5. RequestandvalidateaSURFconextStrongAuthenticationcode
6. ConfirmSURFconextStrongAuthenticationcode
7. Youraccounthasbeenset-up!
SignintoyourOffice2016applications1. OpenyourOfficeapplicationandsignoffthecurrentuser
2. Signinagainwithyouremailaddress
3. SigninwithyourcredentialsonyourADFSpage
4. RequestaSURFconextStrongAuthenticationcode
5. ConfirmSURFconextStrongAuthenticationcode
6. You’resignedin!
MicrosoftOutlookforiOS1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. Youraccountisadded!
OfficeappsforiOS1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. Youraccountisadded!
MicrosoftOutlookforAndroid1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
3. RequestaSURFconextStrongAuthenticationcode
4. ConfirmSURFconextStrongAuthenticationcode
5. Youraccountisadded!
Windows10ClientwithTiqrauthenticationSkypeforBusinessAfteryouenabledmodernauthenticationforSfB,youshouldbeabletologontoSkypewithSURFStrongAuthentication.Pleasefollowthestepsbeneath.
1. LogoffyourSkypeclient
2. Removethelogoncredentials
3. Logonwithyourusernameagain
4. RequestSURFconextStrongAuthenticationcodeviaTiqr
5. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
6. YourloggedinwithSSA!
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook
2. Logonwithyourcredentials
3. RequestSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
5. Youraccounthasbeenset-up!
SignintoyourOffice2016applications1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)
2. Clickon‘Addaccount’
3. Enteryourusername
4. Enteryourpassword
5. RequestSURFconextStrongAuthenticationcodeviaTiqr
6. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
7. Youloggedon!
LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage
2. EnteryourcredentialsontheADFSlogonpage
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
5. You’reloggedon!
UseOneDrivewithSURFconextStrongAuthentication1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’
2. Youwillbeprompted.Clickon‘allow’
3. Clickon‘synchronizenow’
4. UsenewOneDriveversion
5. ConfigureOneDrive
6. Entercredentials
7. RequestaSURFconextStrongAuthenticationcodeviaTiqr
8. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp
9. OneDriveisconfigured
10. Synchronizeyourfiles
11. OneDriveisreadyforuse
MacOSX12.6withTiqrauthenticationSkypeforBusiness
1. Logonwithyourusernameandpassword
2. LogonwithyourusernameandpasswordonADFS
3. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
5. You’reloggedon!
(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook
2. Logonwithyourcredentials
3. Allowsettingretrieval
4. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
6. ConfirmSURFconextStrongAuthenticationcode
SignintoyourOffice2016applications1. OpenyourOfficeapplicationandsignoffthecurrentuser
2. Signinagainwithyouremailaddress
3. SigninwithyourcredentialsonyourADFSpage
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
6. You’resignedin!
LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage
2. EnteryourcredentialsontheADFSlogonpage
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
5. You’reloggedon!
MicrosoftOutlookforiOS1. Addanewaccount
2. LogononyourADFSpage
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
5. Accountisadded!
OfficeappsforiOS1. Addanewaccount
2. LogontoyourADFSpage
3. RequestaSURFconextStrongAuthenticationcodeviaTiqr
4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
5. Youraccountisadded!
MicrosoftOutlookforAndroid1. Addanewaccount
2. SigninwithyourcredentialsonyourADFSpage
3. SigninonyourADFSpage
4. RequestaSURFconextStrongAuthenticationcodeviaTiqr
5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp
6. Youraccountisadded!