'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Use an Office 365 Account in an App Without MFA
Question details
The user needs to authenticate an Office 365 account within a third-party application that does not support Multifactor Authentication (MFA).
- Product
- Microsoft Office 365
- Device & OS
- not provided
- Scenario
- Integrating an Office 365 service or email account with an external application that fails at the MFA login prompt.
- Observed behavior
- The third-party application fails to authenticate because the Office 365 account mandates MFA, but disabling MFA for the entire organization is not a secure or recommended option.
Ensure you have Microsoft 365 Global Administrator or Helpdesk Administrator privileges, as you will need access to the Microsoft 365 admin center to request tenant-specific authentication exceptions.
Submit a Support Request in the Microsoft 365 Admin Center
The most secure way to handle app authentication without disabling global MFA is to get tenant-specific configuration assistance directly from Microsoft Support.
Disabling MFA for your entire organization poses a severe security risk. Instead, Microsoft provides tenant-specific guidance such as Conditional Access policies or service account exclusions to help your app authenticate safely.
Navigate to the Microsoft 365 admin center and log in using your administrator credentials.
Click on the 'Help & support' button, typically located as a floating icon in the bottom right corner of the dashboard.
In the search field, clearly describe your application and its specific authentication requirements (e.g., 'Third-party app requires Office 365 login without MFA').
If the automated solutions and articles provided do not resolve your issue, select the 'Contact Support' option to open a formal service request with a Microsoft technician.
Contact Your Microsoft Subscription Partner
Use this solution if your Microsoft 365 subscription is managed by a third-party reseller or partner.
Experience a Simpler Workflow with WPS Office
If navigating complex Microsoft 365 admin centers and managing strict MFA policies for simple tasks is slowing you down, consider switching to WPS Office. It provides a highly compatible, lightweight, and user-friendly experience for all your document needs without the enterprise-level administrative overhead.
- 1. Download the Software: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install WPS Office: Run the downloaded file and follow the straightforward on-screen instructions to install the suite.
- 3. Start Creating: Open WPS Office to instantly start editing your existing Microsoft Office files without worrying about complex cloud authentication.
Frequently Asked Questions
Can I simply disable MFA globally to allow the app to work?
No, disabling MFA for your entire organization is highly discouraged. It significantly weakens your security posture and leaves your entire tenant vulnerable to unauthorized access. Always look for app-specific or user-specific exclusions.
Can I use an App Password for applications that don't support MFA?
Yes, if your Microsoft 365 administrator allows it, you can generate an App Password. This is a 16-character randomly generated password that permits legacy third-party applications to bypass the standard interactive MFA prompt.
Why do older third-party applications fail to connect to Office 365?
Older applications often rely on Basic Authentication, which does not support Modern Authentication protocols like MFA. Microsoft has actively deprecated Basic Authentication for most Exchange Online services to enhance global security, causing legacy apps to fail.
