现代身份验证^{(Modern Authentication)}是一种身份管理方法，可提供更安全的用户身份验证和授权。在这篇文章中，我们将了解启用现代身份验证时^{(Modern Authentication)}Outlook提示输入密码的原因，并提供解决此问题的解决方案。此问题适用于Outlook、Exchange Online和Outlook for Microsoft 365。

根据下面列出的两种情况，系统会提示您输入凭据，并且Outlook不使用新式身份验证^{(Modern Authentication)}连接到Office 365 - 在您输入凭据后，它们将被传输到Office 365而不是令牌。

• 方案 1^{(Scenario 1)}：Microsoft Outlook使用^{(Microsoft Outlook)}远程过程调用^{(Remote Procedure Call)}( RPC ) 连接到本地Exchange服务器中的主邮箱，它还连接到位于Office 365中的另一个邮箱。
• 方案 2^{(Scenario 2)}：您将邮箱从O^(Outlook) ​​utlook 使用RPC连接到的Exchange服务器迁移到Office 365。

触发此问题是因为Outlook将其身份验证方案的选择限制为RPC支持的方案。但身份验证方案不包括Modern Authentication。

^(Outlook)启用现代身份验证时^{(Modern Authentication)}Outlook提示输入密码

要解决此问题，您需要创建AlwaysUseMSOAuthForAutoDiscover 注册表项以强制Outlook对 Web 服务使用较新的身份验证方法，例如EWS和Autodiscover。

请执行下列操作：

由于这是注册表操作，建议您备份注册表^{(back up the registry)} 或 创建系统还原点 作为必要的预防措施。完成后，您可以执行以下操作：

• 退出 Outlook。
• 按Windows key + R调用“运行”对话框。
• 在“运行”对话框中，键入regedit并按Enter以打开注册表编辑器^{(Registry Editor)}。
• 导航或跳转到下面的注册表项路径：

HKEY_CURRENT_USER\Software\Microsoft\Exchange

• 在该位置，右键单击右侧窗格中的空白区域，然后选择New > DWORD (32-bit) Value。
• 将值名称重命名为AlwaysUseMSOAuthForAutoDiscover  ，然后按 Enter。
• 现在，双击新值以编辑其属性。
• 在属性对话框中，在数值数据框中输入1。
• 单击确定^(OK)以保存更改。
• 退出注册表编辑器。
• 重新启动您的电脑。

就是这样！

Microsoft在其文档中解释说，现代^(Modern)身份验证是客户端（例如笔记本电脑或手机）和服务器之间身份验证和授权方法组合的总称，以及一些依赖于您可能已经使用的访问策略的安全措施熟悉。它包括以下内容：

• 认证方式^{(Authentication methods)}：多因素认证（MFA）；智能卡认证；基于客户端证书的身份验证。
• 授权方式^{(Authorization methods)}：微软的开放授权^{(Open Authorization)}（OAuth）实现。
• 条件访问策略^{(Conditional access policies)}：移动应用程序管理^{(Application Management)}( MAM ) 和Azure Active Directory ( Azure AD )条件访问^{(Conditional Access)}。

使用现代身份验证管理用户身份为管理员提供了许多不同的工具来保护资源。

相关帖子^{(Related post)}：Outlook 在连接到 Office 365 时不断要求输入密码^{(Outlook keeps asking for password when connecting to Office 365)}。

Outlook prompts for password when Modern Authentication is enabled

Modern Authentication is a method of identity management that offers more secure user authentication and authorization. In this post, we will look at why Outlook prompts for passwords when Modern Authentication is enabled, and as well as provide the solution to remediate this issue. This issue applies to Outlook, Exchange Online, and Outlook for Microsoft 365.

Based on the two scenarios listed below, you’re prompted for credentials, and Outlook doesn’t use Modern Authentication to connect to Office 365 – after you enter your credentials, they’re transmitted to Office 365 instead of to a token.

• Scenario 1: Microsoft Outlook connects to your primary mailbox in an on-premises Exchange server using Remote Procedure Call (RPC), and it also connects to another mailbox that’s located in Office 365.
• Scenario 2: You migrate your mailbox to Office 365 from an Exchange server that Outlook connects to by using RPC.

This issue is triggered because Outlook limits its choices of authentication schemes to schemes that are supported by RPC. But the authentication schemes don’t include Modern Authentication.

Outlook prompts for password when Modern Authentication is enabled

To resolve this issue, you need to create AlwaysUseMSOAuthForAutoDiscover registry key to force Outlook to use the newer authentication method for web services, such as EWS and Autodiscover.

Do the following:

Since this is a registry operation, it is recommended that you back up the registry or create a system restore point as necessary precautionary measures. Once done, you can proceed as follows:

• Exit Outlook.
• Press Windows key + R to invoke the Run dialog.
• In the Run dialog box, type regedit and hit Enter to open Registry Editor.
• Navigate or jump to the registry key path below:

HKEY_CURRENT_USER\Software\Microsoft\Exchange

• At the location, right-click on the blank space on the right pane and then select New > DWORD (32-bit) Value.
• Rename the value name as AlwaysUseMSOAuthForAutoDiscover and hit Enter.
• Now, double-click on the new value to edit its properties.
• In the properties dialog box, input 1 in the value data box.
• Click OK to save the change.
• Exit Registry Editor.
• Restart your PC.

That’s it!

Microsoft in their documentation, explains Modern authentication is an umbrella term for a combination of authentication and authorization methods between a client (for example, laptop or phone) and a server, as well as some security measures that rely on access policies that you may already be familiar with. It includes the following:

• Authentication methods: Multi-factor authentication (MFA); smart card authentication; client certificate-based authentication.
• Authorization methods: Microsoft’s implementation of Open Authorization (OAuth).
• Conditional access policies: Mobile Application Management (MAM) and Azure Active Directory (Azure AD) Conditional Access.

Managing user identities with modern authentication gives administrators many different tools to use when it comes to securing resources.

Related post: Outlook keeps asking for password when connecting to Office 365.

Related posts

• Outlook在Windows 10中没有保存密码

• 恢复丢失或忘记的Outlook PST Password免费恢复工具

• 此功能需要可移动媒体 - Password复位错误

• 设置Microsoft Account and Local Account一个Password Expiration Date

• 如何LastPass密码导出为CSV

• SafeInCloud Password Manager使用Cloud账户同步Database

• 最重要的十大密码以避免

• Recover来自Mail客户端的密码：Mail Password Decryptor

• 无法登录到Windows 10 | Windows login and password problems

• 如何生成或创建强密码

• F-Secure的KEY：Password Manager freeware为Windows 10

• 如何禁用内置Password Manager在Chrome，z810​​2448，z810​​8625

• 如何从Web Browsers恢复忘记密码

• Bitwarden Review：免费Open Source Password Manager为Windows PC

• Reset Local Account password使用Installation Media Windows 10

• Google Passwords Manager让您安全地访问密码

• 免费Best Password Managers用于Windows 10

• 如何在Microsoft Edge启用或禁用Reveal Password button

• 它是安全的保存密码在Chrome，Firefox or Edge browser？

• 如何重置或更改Windows 10 PIN