DUO with Office 365

[alamb2001]

Hi,
We are using DUO 2FA to secure our users Exchange Online, but this has now caused us a problem with one of our applications.
We are using an online call logging system that accesses a user mailbox in Office 365 to send and import new emails, but since we have implemented DUO this has stopped working.
Does anyone know if there is any way round this?
I know this is fairly vague, but i am not sure what information you would need.
Thanks,
Alamb200

[ITEM93]

I’d recommend looking into the Azure AD Conditional Access to protect your O365 users.
That way you can protect a all users in a group, and can exclude the mailbox that the call logging system is working with.

The other thing worth checking is if the Call Logging System is using Basic Auth (e.g. IMAP) or if they can be setup using OAuth.
Microsoft have announced that they are deprecating Basic Auth, so it may brake soon anyway regardless of the Duo side.

Duo Security

Duo Two-Factor Authentication for Microsoft Azure Active Directory

Learn how Duo integrates with Microsoft Azure’s Conditional Access policies to add two-factor authentication to Active Directory logins.

Microsoft 365 Blog – 1 Sep 22

Microsoft retires Basic Authentication in Exchange Online | Microsoft 365 Blog

Microsoft is turning off Basic Authentication in Exchange Online for all tenants.. Customers can implement Modern Authentication today.

Est. reading time: 2 minutes

[Michael_Maher]

There is probably an App Registration set-up in Azure AD for your call logging system.

You may need to exclude this application from the Conditional Access policy which is applying the Duo MFA custom control.