微軟3月24日宣布Office 2013客戶(hù)端Modern認(rèn)證功能從內(nèi)部預(yù)覽版轉(zhuǎn)向公共預(yù)覽版。Modern認(rèn)證帶來(lái)了基于Active Directory Authentication Library(ADAL)的Office 2013 Windows客戶(hù)端登錄。現(xiàn)在，所有使用Office 2013并且安裝了2015年3月最新更新的用戶(hù)都可以嘗試這一版本。

以下是這一版本的可運(yùn)行腳本，更加詳細(xì)地描述了基于ADAL的認(rèn)證情況：

• Office 2013客戶(hù)端應(yīng)用多重因素認(rèn)證(MFA)

• 基于SAML的第三方身份提供商登錄

• 智能卡和基于證書(shū)的認(rèn)證

• Outlook不再要求基本認(rèn)證協(xié)議

Office 2013客戶(hù)端應(yīng)用登錄到Office 365服務(wù)可以獲得Exchange Online電子郵件、SharePoint Online文件、連接到Skype for Business Online(原Lync Online)以及激活Office客戶(hù)端許可。

來(lái)源及原文：

Today’s post was written by Paul Andrew, technical product manager for Identity Management on the Office 365 team.

Today we are pleased to announce that Office 2013 client modern authentication features have moved from private preview to public preview. This means the program is easier to join and production support is included for participants. Modern authentication brings Active Directory Authentication Library (ADAL)-based sign in to Office 2013 Windows clients. Previously, this was only available as a private preview for testing. Now modern authentication is available to any customer running the March 2015 or later update for Office 2013. It will continue to be off by default in the client, but can be enabled on Windows machines by participants in the public preview.

Modern authentication for Office 2013 Windows client

Office 2013 client applications sign in to the Office 365 service to gain access to Exchange Online email, to access files on SharePoint Online, to connect to Skype for Business Online (formerly Lync Online), and to activate the Office client license. This update enables IT administrators to configure new security scenarios for sign in with Office 365.

Here are some scenarios that are enabled, which are described in more detail in the previous post about ADAL-based authentication:

Multi-factor authentication (MFA) for Office 2013 client applications

SAML-based third-party identity provider sign in

**art card and certificate-based authentication

Outlook no longer requiring the basic authentication protocol

There are still some limitations where the public preview does not yet contain all the functionality that we plan to include. For each of these limitations, we have details of what doesn’t work as expected and how to work around it in the TechNet Article, Office 2013 and Office 365 ProPlus modern authentication: Things to know before onboarding. Please review these details before joining the preview.

Use of Azure Rights Management Service

AD FS Client Access Filtering Policies

Skype for Business (formerly Lync) client is not MFA enabled

External Sharing in SharePoint Online

Multiple mi**atched tenants connected from Outlook

**art card as primary sign in needs additional configuration

The public preview works with all Microsoft identity integration models including the cloud-based identity model, the synchronized identity model, and the federated identity model with AD FS. You can read about these identity models on a previous post here.

Join the program now

The preview involves a change to your Office 365 tenant and a change to each Windows machine that Office 2013 runs on.

To join the public preview program follow these steps:

Sign up on Microsoft Connect to the public preview here.

Wait to hear back while your tenant is enabled.

Apply the registry setting to enable modern authentication on your Windows client machines. Details about these updates are published here.

To exit the public preview program follow these steps:

Remove the registry setting to disable modern authentication on your Windows client machines. Details about these updates are published here.

Users can sign in as before with the Microsoft Online Sign-In Assistant.

You do not need to have modern authentication disabled in your tenant.

The public preview update for Office 2013 clients includes Office 2013 and Office 365 ProPlus. Office 2013 requires the March 2015 update patch that is described here.

For Office 365 administrators, we have documentation on enabling MFA here.

For Office 365 users, we have documentation on using MFA here.

Modern authentication on other platforms

Modern authentication on an iPad.

本文由蘇櫻網(wǎng)絡(luò)轉(zhuǎn)載而成,如有侵權(quán) 請(qǐng)聯(lián)系站長(zhǎng)刪除