Just enabling them modern authentication will trigger them the ROPC and grant the OAUTH 2.0 token. Because of this, Microsoft Teams Rooms resource accounts shouldn’t be configured to use multi-factor authentication (MFA), smart card authentication, or client certificate-based authentication (which are all available for end users). This is one of the key differences between how modern authentication works for user accounts versus resource accounts that are used by the Microsoft Teams Rooms application. The modern authentication mechanism uses the resource owner password credentials authorization grant type in OAuth 2.0, which doesn’t require any user intervention. The account management of the Teams Room devices is set at the application level.Īfter turning on Modern Authentication on the Teams Room it leverages Active Directory Authentication Library (ADAL) to consume services Microsoft Teams and Exchange. Post Microsoft Teams Room App version 4.4.25.0 we have the option to enable Modern Authentication on the devices capable of hosting Microsoft Teams Meeting. For instance Room Systems they are having resource accounts with Teams Enabled and Exchange Online where these resource accounts cannot have modern authentication enabled with MFA like normal user accounts to approve for the 2nd factor authentication. However there are cases where the modern authentication cannot be interactive for the 2nd factor authentication ,needs some planning on those special cases and they have exceptions. When most of the organizations have already enabled Modern Authentication which is a good sign. As we all know the basic authentication will be retired for Office 365 sooner and its high time for us to enforce Modern Authentication on all clients.

Enable modern authentication