SURFconextStrongAuthenticationwithADFS4.0Testresults

Version1.1(23-10-2017)NickBoszhard(2AT)

InhoudsopgaveChangelog...............................................................................................................................................7

Introduction.............................................................................................................................................8

Importantfindings...................................................................................................................................9

SURFconextStrongAuthenticationwithSMSverification...................................................................9

1. Windows10Client...................................................................................................................9

2. MacOSXclient.........................................................................................................................9

3. AppleiPhoneiOS11................................................................................................................9

4. AndroidPhone.........................................................................................................................9

SURFconextStrongAuthenticationwithTiqrverification..................................................................10

1. Windows10Client.................................................................................................................10

2. MacOSXclient.......................................................................................................................10

3. AppleiPhoneiOS11..............................................................................................................10

4. AndroidPhone.......................................................................................................................10

ThunderbirdandAppleMail..............................................................................................................11

InstallSURFconextStrongAuthenticationPluginonADFS4.0..............................................................12

EnableModernAuthenticationforExchangeandSkypeforBusiness...................................................16

Windows10ClientwithSMSauthentication.........................................................................................17

SkypeforBusiness.............................................................................................................................17

1. LogoffyourSkypeclient.........................................................................................................17

2. Removethelogoncredentials...............................................................................................17

3. Logonwithyourusernameagain...........................................................................................18

4. RequestSURFconextStrongAuthenticationcode.................................................................19

5. Enterthecodeyoureceived..................................................................................................19

6. YourloggedinwithSSA!........................................................................................................20

(Re)addyouraccounttoMicrosoftOutlook.....................................................................................21

1. OpenMicrosoftOutlook........................................................................................................21

2. Logonwithyourcredentials..................................................................................................22

3. RequestSURFconextStrongAuthenticationcode.................................................................22

4. ConfirmSURFconextStrongAuthenticationcode.................................................................23

5. Youraccounthasbeenset-up!..............................................................................................23

SignintoyourOffice2016applications............................................................................................24

1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)..............................................24

2. Clickon‘Addaccount’............................................................................................................24

3. Enteryourusername.............................................................................................................25

4. Enteryourpassword..............................................................................................................25

5. RequestaSURFconextStrongAuthenticationcode..............................................................26

6. ConfirmSURFconextStrongAuthenticationcode.................................................................26

7. Youloggedon!.......................................................................................................................27

LogononSharePointOnlinethroughbrowser...................................................................................28

1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................28

2. EnteryourcredentialsontheADFSlogonpage....................................................................28

3. RequestaSURFconextStrongAuthenticationcode..............................................................29

4. ConfirmSURFconextStrongAuthenticationcode.................................................................29

5. You’reloggedon!...................................................................................................................29

UseOneDrivewithSURFconextStrongAuthentication.....................................................................30

1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’............................30

2. Youwillbeprompted.Clickon‘allow’...................................................................................30

3. Clickon‘synchronizenow’.....................................................................................................31

4. UsenewOneDriveversion.....................................................................................................31

5. ConfigureOneDrive...............................................................................................................32

6. Entercredentials....................................................................................................................32

7. RequestaSURFconextStrongAuthenticationcode..............................................................33

8. ConfirmSURFconextStrongAuthenticationcode.................................................................33

9. OneDriveisconfigured..........................................................................................................34

10. Synchronizeyourfiles........................................................................................................35

11. OneDriveisreadyforuse...................................................................................................35

MacOSX12.6withSMSauthentication.................................................................................................36

SkypeforBusiness.............................................................................................................................36

1. Logonwithyourusernameandpassword.............................................................................36

2. LogonwithyourusernameandpasswordonADFS..............................................................36

3. RequestandvalidateaSURFconextStrongAuthenticationcode..........................................37

4. ConfirmSURFconextStrongAuthenticationcode.................................................................37

5. You’reloggedon!...................................................................................................................38

(Re)addyouraccounttoMicrosoftOutlook.....................................................................................39

1. OpenMicrosoftOutlookandaddanaccount........................................................................39

2. Enteryouremailaddress.......................................................................................................39

3. OutlookwillconnecttoOffice365........................................................................................40

4. EnteryourADFScredentials.................................................................................................40

5. RequestandvalidateaSURFconextStrongAuthenticationcode..........................................41

6. ConfirmSURFconextStrongAuthenticationcode.................................................................41

7. Youraccounthasbeenset-up!..............................................................................................42

SignintoyourOffice2016applications............................................................................................43

1. OpenyourOfficeapplicationandsignoffthecurrentuser...................................................43

2. Signinagainwithyouremailaddress....................................................................................43

3. SigninwithyourcredentialsonyourADFSpage..................................................................44

4. RequestaSURFconextStrongAuthenticationcode..............................................................44

5. ConfirmSURFconextStrongAuthenticationcode.................................................................45

6. You’resignedin!....................................................................................................................45

MicrosoftOutlookforiOS..................................................................................................................46

1. Addanewaccount................................................................................................................46

2. SigninwithyourcredentialsonyourADFSpage..................................................................46

3. RequestaSURFconextStrongAuthenticationcode..............................................................47

4. ConfirmSURFconextStrongAuthenticationcode.................................................................47

5. Youraccountisadded!..........................................................................................................48

OfficeappsforiOS.............................................................................................................................49

1. Addanewaccount................................................................................................................49

2. SigninwithyourcredentialsonyourADFSpage..................................................................49

3. RequestaSURFconextStrongAuthenticationcode..............................................................50

4. ConfirmSURFconextStrongAuthenticationcode.................................................................50

5. Youraccountisadded!..........................................................................................................51

MicrosoftOutlookforAndroid..........................................................................................................52

1. Addanewaccount................................................................................................................52

2. SigninwithyourcredentialsonyourADFSpage..................................................................52

3. RequestaSURFconextStrongAuthenticationcode..............................................................53

4. ConfirmSURFconextStrongAuthenticationcode.................................................................53

5. Youraccountisadded!..........................................................................................................54

Windows10ClientwithTiqrauthentication.........................................................................................55

SkypeforBusiness.............................................................................................................................55

1. LogoffyourSkypeclient.........................................................................................................55

2. Removethelogoncredentials...............................................................................................55

3. Logonwithyourusernameagain...........................................................................................56

4. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................57

5. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................57

6. YourloggedinwithSSA!........................................................................................................58

(Re)addyouraccounttoMicrosoftOutlook.....................................................................................59

1. OpenMicrosoftOutlook........................................................................................................59

2. Logonwithyourcredentials..................................................................................................60

3. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................60

4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................61

5. Youraccounthasbeenset-up!..............................................................................................61

SignintoyourOffice2016applications............................................................................................62

1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)..............................................62

2. Clickon‘Addaccount’............................................................................................................62

3. Enteryourusername.............................................................................................................63

4. Enteryourpassword..............................................................................................................63

5. RequestSURFconextStrongAuthenticationcodeviaTiqr.....................................................64

6. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................64

7. Youloggedon!.......................................................................................................................65

LogononSharePointOnlinethroughbrowser...................................................................................66

1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................66

2. EnteryourcredentialsontheADFSlogonpage....................................................................66

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................67

4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................67

5. You’reloggedon!...................................................................................................................68

UseOneDrivewithSURFconextStrongAuthentication.....................................................................69

1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’............................69

2. Youwillbeprompted.Clickon‘allow’...................................................................................69

3. Clickon‘synchronizenow’.....................................................................................................70

4. UsenewOneDriveversion.....................................................................................................70

5. ConfigureOneDrive...............................................................................................................71

6. Entercredentials....................................................................................................................71

7. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................72

8. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp......................................72

9. OneDriveisconfigured..........................................................................................................73

10. Synchronizeyourfiles........................................................................................................73

11. OneDriveisreadyforuse...................................................................................................74

MacOSX12.6withTiqrauthentication.................................................................................................75

SkypeforBusiness.............................................................................................................................75

1. Logonwithyourusernameandpassword.............................................................................75

2. LogonwithyourusernameandpasswordonADFS..............................................................75

3. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr..............................76

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................76

5. You’reloggedon!...................................................................................................................77

(Re)addyouraccounttoMicrosoftOutlook.....................................................................................78

1. OpenMicrosoftOutlook........................................................................................................78

2. Logonwithyourcredentials..................................................................................................79

3. Allowsettingretrieval............................................................................................................79

4. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr..............................80

5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................80

6. ConfirmSURFconextStrongAuthenticationcode.................................................................81

SignintoyourOffice2016applications............................................................................................82

1. OpenyourOfficeapplicationandsignoffthecurrentuser...................................................82

2. Signinagainwithyouremailaddress....................................................................................82

3. SigninwithyourcredentialsonyourADFSpage..................................................................83

4. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................83

5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................84

6. You’resignedin!....................................................................................................................84

LogononSharePointOnlinethroughbrowser...................................................................................85

1. EnteryourcredentialsontheMicrosoftOnlinelogonpage..................................................85

2. EnteryourcredentialsontheADFSlogonpage....................................................................85

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................86

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................86

5. You’reloggedon!...................................................................................................................86

MicrosoftOutlookforiOS..................................................................................................................87

1. Addanewaccount................................................................................................................87

2. LogononyourADFSpage.....................................................................................................87

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................88

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................88

5. Accountisadded!..................................................................................................................89

OfficeappsforiOS.............................................................................................................................90

1. Addanewaccount................................................................................................................90

2. LogontoyourADFSpage......................................................................................................90

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................91

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................91

5. Youraccountisadded!..........................................................................................................92

MicrosoftOutlookforAndroid..........................................................................................................93

1. Addanewaccount................................................................................................................93

2. SigninwithyourcredentialsonyourADFSpage..................................................................93

3. SigninonyourADFSpage....................................................................................................94

4. RequestaSURFconextStrongAuthenticationcodeviaTiqr..................................................94

5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp..............................................95

6. Youraccountisadded!..........................................................................................................95

ChangelogWhen What Bywho 27October2017 Smalltextualchanges RaoulTeeuwen27October2017 Version1.0 NickBoszhard

IntroductionThisdocumentismeanttoshowhowyouareabletouseseveralapplicationsandclientswithSURFconextStrongAuthenticationonADFS4.0.WetestedboththeSMSandTiqrverification.We’vedocumentedthestepsthatshouldbetakento:

- InstallSURFconextStrongAuthenticationPluginonADFS4.0- EnableModernAuthenticationonSkypeforBusinessandOutlookOnline- Configurethetestedappsandclients

We’vereportedthemostimportantfindingsinthisdocument.

Agraphicrepresentationofthetestsetupisshownbelow:

ImportantfindingsThissectionwillshowthemostimportantfindingsbasedonthetests

SURFconextStrongAuthenticationwithSMSverification1. Windows10Client

Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”

2. MacOSXclientApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”AppleMail See“ThunderbirdandAppleMail”

3. AppleiPhoneiOS11Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness

4. AndroidPhoneApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness

SURFconextStrongAuthenticationwithTiqrverification1. Windows10Client

Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”

2. MacOSXclientApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness Thunderbird See“ThunderbirdandAppleMail”AppleMail See“ThunderbirdandAppleMail”

3. AppleiPhoneiOS11Application Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness

4. AndroidPhoneApplication Result CommentsMicrosoftOutlook2016 MicrosoftOffice2016apps MicrosoftOneDrive LogontoSharePointviabrowser MicrosoftSkypeforBusiness

ThunderbirdandAppleMailForAppleMailandThunderbirdtoworkincombinationwithasecondfactoryoumustuseapplicationspecificpasswords.Tobeabletouseanapplicationspecificpassword,youneedtoenableMFAonOffice365foreveruserthatwantsthis.

IncaseyouuseSURFconextStrongAuthenticationandauserneedstouseapplicationspecificpasswords,forallapplicationswithoutapplicationspecificpasswords(forinstanceMicrosoftclients)theuserneedstoauthenticateviaSURFconextStrongAuthenticationandafterthatviaaMicrosoftMFA.Thissetuptechnicallyworks,butinstitutionsandusersneedtodecidewhetherthisisareasonablesolution.

Applicationspecificpasswordswillhavetobeusedfor(Microsoft)applicationsthatdonotsupportModernAuthentication.MicrosoftMFAcanbeenabledperuser,soenablingthiswouldn’thavetoaffectyourwholeorganization.

MoreinformationaboutMicrosoftapplicationstosupportModernAuthenticationcanbefoundhere:https://blogs.office.com/en-us/2015/11/19/updated-office-365-modern-authentication-public-preview/?eu=true

InstallSURFconextStrongAuthenticationPluginonADFS4.0Gotohttps://github.com/SURFnet/ADFS-MFA-SAML2.0-ExtensionwhereyoucanfindtheSSAplugin.We’veusedtheprecompiledversionthatcouldbefoundathttps://github.com/SURFnet/ADFS-MFA-SAML2.0-Extension/releases/download/0.1/SetupPackage.zipWetestedthissetupwiththeSURFconextStrongAuthenticationPluginversion0.1.Amorerecentversion(0.2)isalsoavailableandcanbefoundhere:https://github.com/SURFnet/ADFS-MFA-SAML2.0-Extension/releases/download/0.2/SetupPackage-0.2.zipYouneedtounzipthisfileonyourADFSserverandedittheSurfnetMfaPluginConfiguration.jsonfile.{"Settings":{"AuthenticationServiceUrl":"https://sfo-gateway.pilot.stepup.surfconext.nl/authentication/initiate","SecondFactorEndpoint":"https://gateway.pilot.stepup.surfconext.nl/second-factor-only/single-sign-on","MinimalLoa":"http://pilot.surfconext.nl/assurance/sfo-level2","schacHomeOrganization":"YourschacHomeOrganization","ActiveDirectoryName":"YourADName","ActiveDirectoryUserIdAttribute":"ADUserIDAttribute"},"ServiceProvider":{"SigningCertificate":"signingcertificate(notneededwithasingleADFSserver","EntityId":"http://youradfsurl/adfs/services/trust","AssertionConsumerServiceUrl":"https://gateway.pilot.stepup.surfconext.nl/authenticate/consume-acs"},"IdentityProvider":{"EntityId":"https://gateway.pilot.stepup.surfconext.nl/second-factor-only/metadata","Certificate":"certificateacquiredfromSURFconext"}}ThenrunaPowerShellwindowsasanAdministratorandruntheInstall-SurfnetMfaPlugin.ps1file

TheinstallationwillrunandyouwillhavetosendacertificateoutputtoSURFconext

OpenyourADFSmanagementwindowandsettheMulti-factorAuthenticationMethodstoADFS.SCSA

EdittheAccessControlPolicyontherelyingPartyTrust,youwanttouse

YouareabletosetanaccesscontrolpolicyforyourMFA.WechosetosetMFAforonlyacertaingroup

Youshouldnowbeabletologontohttps://selfservice.pilot.stepup.surfconext.nl/andregisteratoken(SMS,Tiqr.YouwillreceiveanactivationcodeinyouremailthatyouwillhavetoactivatewithsomeonefromSURFconext.

Afteryourregistration,youshouldbeabletologonwithSURFconextStrongAuthenticationandaverificationtoken.

EnableModernAuthenticationforExchangeandSkypeforBusinessWhenthisdocumentwaswritten,MicrosofthasenabledModernAuthenticationforExchangeandSkypeforBusiness(SfB)bydefault.Butfortenantsthatarecreatedearlier,itisnotenabledbydefault.

InthisstepwewillshowyouhowtoenableModernAuthenticationforExchangeOnlineandSkypeforBusinessOnline.

ExchangeOnline#### To enable Windows PowerShell to run signed scripts, run the following command in an elevated Windows PowerShell window (a Windows PowerShell window you open by selecting Run as administrator): #### Set Execution Policy #### Set-ExecutionPolicy RemoteSigned #### Set User Credentials #### $UserCredential = Get-Credential #### Create Exchange Online session #### $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection #### Import the Exchange Online Session Import-PSSession $Session #### Set OAuth enabled to true #### Set-OrganizationConfig -OAuth2ClientProfileEnabled $true #### Check if the setting has been set correctly #### Get-OrganizationConfig | Format-Table -Auto Name,OAuth* #### Remove Exchange Online session #### Remove-PSSession $Session

SkypeforBusinessOnline

#### Download the SfB Online Powershell module from: https://www.microsoft.com/en-us/download/details.aspx?id=39366 #### Set User Credentials #### $credential = Get-Credential #### Create SfB Online session #### $session = New-CsOnlineSession -Credential $credential -Verbose #### Import the SfB Online Session Import-PSSession $session #### Set OAuth enabled to true/allowed #### Set-CsOAuthConfiguration -ClientAdalAuthOverride Allowed #### Check if the setting has been set correctly #### Get-CsOAuthConfiguration #### Remove SfB Online session #### Remove-PSSession $session

Windows10ClientwithSMSauthenticationSkypeforBusiness

AfteryouenabledmodernauthenticationforSfB,youshouldbeabletologontoSkypewithSURFStrongAuthentication.Pleasefollowthestepsbeneath.

1. LogoffyourSkypeclient

2. Removethelogoncredentials

3. Logonwithyourusernameagain

4. RequestSURFconextStrongAuthenticationcode

5. Enterthecodeyoureceived

6. YourloggedinwithSSA!

(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook

2. Logonwithyourcredentials

3. RequestSURFconextStrongAuthenticationcode

4. ConfirmSURFconextStrongAuthenticationcode

5. Youraccounthasbeenset-up!

SignintoyourOffice2016applications1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)

2. Clickon‘Addaccount’

3. Enteryourusername

4. Enteryourpassword

5. RequestaSURFconextStrongAuthenticationcode

6. ConfirmSURFconextStrongAuthenticationcode

7. Youloggedon!

LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage

2. EnteryourcredentialsontheADFSlogonpage

3. RequestaSURFconextStrongAuthenticationcode

4. ConfirmSURFconextStrongAuthenticationcode

5. You’reloggedon!

UseOneDrivewithSURFconextStrongAuthentication1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’

2. Youwillbeprompted.Clickon‘allow’

3. Clickon‘synchronizenow’

4. UsenewOneDriveversion

5. ConfigureOneDrive

6. Entercredentials

7. RequestaSURFconextStrongAuthenticationcode

8. ConfirmSURFconextStrongAuthenticationcode

9. OneDriveisconfigured

10. Synchronizeyourfiles

11. OneDriveisreadyforuse

MacOSX12.6withSMSauthenticationSkypeforBusiness

1. Logonwithyourusernameandpassword

2. LogonwithyourusernameandpasswordonADFS

3. RequestandvalidateaSURFconextStrongAuthenticationcode

4. ConfirmSURFconextStrongAuthenticationcode

5. You’reloggedon!

(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlookandaddanaccount

2. Enteryouremailaddress

3. OutlookwillconnecttoOffice365

4. EnteryourADFScredentials

5. RequestandvalidateaSURFconextStrongAuthenticationcode

6. ConfirmSURFconextStrongAuthenticationcode

7. Youraccounthasbeenset-up!

SignintoyourOffice2016applications1. OpenyourOfficeapplicationandsignoffthecurrentuser

2. Signinagainwithyouremailaddress

3. SigninwithyourcredentialsonyourADFSpage

4. RequestaSURFconextStrongAuthenticationcode

5. ConfirmSURFconextStrongAuthenticationcode

6. You’resignedin!

MicrosoftOutlookforiOS1. Addanewaccount

2. SigninwithyourcredentialsonyourADFSpage

3. RequestaSURFconextStrongAuthenticationcode

4. ConfirmSURFconextStrongAuthenticationcode

5. Youraccountisadded!

OfficeappsforiOS1. Addanewaccount

2. SigninwithyourcredentialsonyourADFSpage

3. RequestaSURFconextStrongAuthenticationcode

4. ConfirmSURFconextStrongAuthenticationcode

5. Youraccountisadded!

MicrosoftOutlookforAndroid1. Addanewaccount

2. SigninwithyourcredentialsonyourADFSpage

3. RequestaSURFconextStrongAuthenticationcode

4. ConfirmSURFconextStrongAuthenticationcode

5. Youraccountisadded!

Windows10ClientwithTiqrauthenticationSkypeforBusinessAfteryouenabledmodernauthenticationforSfB,youshouldbeabletologontoSkypewithSURFStrongAuthentication.Pleasefollowthestepsbeneath.

1. LogoffyourSkypeclient

2. Removethelogoncredentials

3. Logonwithyourusernameagain

4. RequestSURFconextStrongAuthenticationcodeviaTiqr

5. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp

6. YourloggedinwithSSA!

(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook

2. Logonwithyourcredentials

3. RequestSURFconextStrongAuthenticationcodeviaTiqr

4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp

5. Youraccounthasbeenset-up!

SignintoyourOffice2016applications1. OpenyourOfficeapplication(weusedMicrosoftExcel2016)

2. Clickon‘Addaccount’

3. Enteryourusername

4. Enteryourpassword

5. RequestSURFconextStrongAuthenticationcodeviaTiqr

6. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp

7. Youloggedon!

LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage

2. EnteryourcredentialsontheADFSlogonpage

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr

4. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp

5. You’reloggedon!

UseOneDrivewithSURFconextStrongAuthentication1. GotoaSharePointsiteofyourcompanyO365tenantandclickon‘Sync’

2. Youwillbeprompted.Clickon‘allow’

3. Clickon‘synchronizenow’

4. UsenewOneDriveversion

5. ConfigureOneDrive

6. Entercredentials

7. RequestaSURFconextStrongAuthenticationcodeviaTiqr

8. ConfirmSURFconextStrongAuthenticationcodeonyourTiqrapp

9. OneDriveisconfigured

10. Synchronizeyourfiles

11. OneDriveisreadyforuse

MacOSX12.6withTiqrauthenticationSkypeforBusiness

1. Logonwithyourusernameandpassword

2. LogonwithyourusernameandpasswordonADFS

3. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

5. You’reloggedon!

(Re)addyouraccounttoMicrosoftOutlook1. OpenMicrosoftOutlook

2. Logonwithyourcredentials

3. Allowsettingretrieval

4. RequestandvalidateaSURFconextStrongAuthenticationcodeviaTiqr

5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

6. ConfirmSURFconextStrongAuthenticationcode

SignintoyourOffice2016applications1. OpenyourOfficeapplicationandsignoffthecurrentuser

2. Signinagainwithyouremailaddress

3. SigninwithyourcredentialsonyourADFSpage

4. RequestaSURFconextStrongAuthenticationcodeviaTiqr

5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

6. You’resignedin!

LogononSharePointOnlinethroughbrowser1. EnteryourcredentialsontheMicrosoftOnlinelogonpage

2. EnteryourcredentialsontheADFSlogonpage

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

5. You’reloggedon!

MicrosoftOutlookforiOS1. Addanewaccount

2. LogononyourADFSpage

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

5. Accountisadded!

OfficeappsforiOS1. Addanewaccount

2. LogontoyourADFSpage

3. RequestaSURFconextStrongAuthenticationcodeviaTiqr

4. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

5. Youraccountisadded!

MicrosoftOutlookforAndroid1. Addanewaccount

2. SigninwithyourcredentialsonyourADFSpage

3. SigninonyourADFSpage

4. RequestaSURFconextStrongAuthenticationcodeviaTiqr

5. ConfirmSURFconextStrongAuthenticationcodeviaTiqrapp

6. Youraccountisadded!