MFA enabled account Exchange Online Powershell automation with tokens

Nikita Krivets 491

Hello,

I was told to put my question here. Just in case here is the link for my previous question.
https://answers.microsoft.com/en-us/msoffice/forum/all/mfa-enabled-account-exchange-online-powershell/08a8f9f9-163f-44a4-a566-1bb3e4d6eaab

I need to automate my Exchange Online Powershell Tasks using an MFA enabled user account.

Firstly, I entered my credentials and proceed with MFA to get an Access Token and a Refresh Token. Secondly, I opened my Exchange Online Powershell session (https://outlook.office365.com/PowerShell-LiveId?BasicAuthToOAuthConversion=true) with the Access Token as a password for my * Email address is removed for privacy *. Now the session is established. Next time I want to open a session, I am to use my previously acquired Refresh Token to get a new Access Token and so on.

Is it a proper way to automate my tasks?

Thanks in advance.

FrankHu-MSFT 976 Reputation points

2019-12-11T02:52:45.057+00:00

Hello,

That sounds like it should be fine, but if you're using an exchange online powershell you don't need to get the access token seperately. You can follow the protocol described in the docs here : https://zcusa.951200.xyz/en-us/powershell/exchange/exchange-online/connect-to-exchange-online-powershell/mfa-connect-to-exchange-online-powershell?view=exchange-ps

And once you've logged in, you can perform your tasks using your logged in session.

Please remember to mark one of the responses as answer if your question has been answered. If not please let us know if there are anymore questions.
Nikita Krivets 491 Reputation points

2019-12-11T08:04:04.027+00:00

@FrankHu-MSFT Well, Thank you for your response! Yeah, I would love to use new Exchange Online cmdlets, but in my workflow I am able to log in just once and then renew my tokens when I need them. New cmdlets as far as I know do not allow such behavior. So, they can not be used for automation on a long-term basis. Please, correct me If I am mistaken.

Accepted answer

FrankHu-MSFT 976 Reputation points

2019-12-11T18:49:10.057+00:00

I see, so you want to consistently refresh the token? Unfortunately this is not supported, per the github issue here : https://github.com/MicrosoftDocs/office-docs-powershell/issues/3351

If you're interested in this feature, I suggest submitting an issue against here : https://github.com/MicrosoftDocs/office-docs-powershell/issues/new

And if there's enough community support the product team will look into implementing this feature accordingly. Thanks for your feedback!
Please sign in to rate this answer.

1 person found this answer helpful.
Nikita Krivets 491 Reputation points

2019-12-12T08:16:18.84+00:00

@FrankHu-MSFT Yeah, I would like consistently refresh my tokens. It is not "legal" way of automation, but at least it works as expected. Well then, is there any way to automate my Exchange Online tasks under MFA Enabled account without entering credentials and MFA authorization "code" every time to establish a new Powershell session?

FrankHu-MSFT 976 Reputation points

2019-12-12T17:30:02.173+00:00

That would depend on whether or not Office-Docs-Powershell supports it, please submit a github issue against the github repo there accordingly, however this is most likely not a supported feature.

Nikita Krivets 491 Reputation points

2019-12-13T07:42:28.06+00:00

@FrankHu-MSFT Thank you!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

MFA enabled account Exchange Online Powershell automation with tokens

0 additional answers

Your answer