You will need to leverage the Classic Exchange Hybrid Topology and publish AutoDiscover, EWS, ActiveSync, MAPI, and OAB endpoints for Hybrid Modern Authentication to function with various Outlook clients. *Hybrid Modern Authentication is not supported with the Hybrid Agent. Exchange Server 2013/2016/2019 with latest Cumulative Update installed.Exchange Server 2010 is not running in the organization.Hybrid Modern Authentication prerequisitesīefore you start to configure Hybrid Modern Authentication, ensure that you did go through these steps:

That’s when you know that Modern Authentication is used. The Authn column needs to show as Bearer*. In the Authn (authentication) column, you will see Nego* as the authentication scheme. Hold down the CTRL key and right-click on the Outlook client in the Windows system tray. Note: Hybrid Modern Authentication works great with a single Exchange Server or Exchange Server in high availability (load-balanced).Īmanda has a mailbox on-premises, and we can verify that she is connecting with basic authentication in the Outlook desktop application. Now that we have mailboxes on-premises, we like the users to authenticate with modern authentication instead of the default basic authentication. Most of the mailboxes are in Exchange Online, but we do have mailboxes on-premises. Confirm EvoSTS auth server object is present Enable modern authentication in Exchange Online How to configure Hybrid Modern Authentication.Hybrid Modern Authentication prerequisites.

Exchange online modern authentication