...
Basically, you need to know with what clients your users want to access the Office365 environment, and test whether those clients pose problems.
OS/client-combinations we have tested for this setup (note: don't forget to test mobile clients!):
...
...
Notes:
- Microsoft Office 2016 applications will only work with 'modern authentication' enabled
- Apple Mail will only work with MFA enabled and an application specific password
- Thunderbird will only work with MFA enabled and an application specific password
- At the moment of writing, Edge is supported, but with limitations
Setup 2 Office 365 with AD FS
...
'Rich clients', like email apps, might not work or need a work-around when they do not support federated authentication. Many Microsoft clients are able to work with federated authentication. Some (email) clients won't work with AD FS directly, but will work with IMAP or POP settings. With this scenario, you won't need MFA and application passwords, but you will need modern authentication. We've documented how you can enable modern authentication.
OS/client-combinations we have tested for this setup (note: don't forget to test mobile clients!):
...
...
Notes:
- Thunderbird will only work with IMAP or POP settings. You can use the 'normal' username and password. Use outlook.office365.com for incoming server and smtp.office365.com for outgoing server.
- Username and password will be sent over a SSL connection
- This setup needs some more configuration for Thunderbird
- You don't have the Exchange functionalities in Thunderbird, since this is an IMAP or POP configuration
- At the moment of writing, Edge is supported, but with limitations
Setup 3 Office 365 with password sync
...
This setup is the least complex one of the three. We've experienced no problems with any of the tested applications and no extra settings were required.
OS/client-combinations we have tested for this setup (note: don't forget to test mobile clients!):
...
Notes:
...
Office365 and SURFsecureID
...