Re: x50 unable to connect to Teams without MFA

QL · ‎08-17-2021

Hello ! We received many Poly X50 with their TC8, this is the first time we try to implement an MTR solution. We had created one acount with a Teams Rooms Licence associate. When we try to connect the TC8 to Teams with this account a second authentication is needed with Microsoft Auhenticator. We don't want to use microsoft authenticator because there would be a link with a smartphone and this is not desirable. The question is: why a second authentication is requested? The account is not configured in MFA and no conditional access policy seems to apply. If, with the same account, I log in through my personal computer then no second authentication is required, how can this be done with the TC8?

Version of TC8 : 3.6.0-210534

SteffenBaierUK · ‎08-17-2021

Hello @QL ,

Welcome to the Poly Community.

Your post was marked as spam and had to be released.

I would suggest you contact our partner Microsoft on any restrictions on their platform.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

----------------

If official support is required please check how to phone or open a case here

----------------
The title Poly Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------

⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓SIGNATURE ⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓
Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
Please also ensure you always check the VoIP , Video Endpoint , Microsoft Voice , PSTN or other FAQ's in the different sections

mshu · ‎08-18-2021

First of all, how was the account created? Is it a "normal" user account or a room/resource account?

Do you use MFA in general on your tenant? I would suggest to disable Modern Auth for the Teams Room Account.

QL · ‎08-18-2021

@mshu The account is a room account. The MFA is disable on our tenant. It's only when connecting to the TC8 that there is a second authentication required, whether with a resource account or a personal account. The TC8 is an Android device, you might think that it's InTune that requires a second authentication but the device doesn't even appear in intune.

Disabling modern authentication is a bad idea in my sense, not only for obvious security reasons but also because the login to Teams is supposed to work with OAuth 2.0. However, we don't even see this possibility through the TC8. We have access to the device settings but not to the Teams settings (which contain the modern activation button), it seems that we must first connect to Teams to access it (wich is a bit strange), unless I miss something ?

Anyway I contacted Microsoft support, I am waiting for a solution from them. Once I have it I will share it here.

bshanelong · ‎02-02-2023

Did you ever find out what the issue was here? We're running into the same issue on an X50