MT.1044: Ensure modern authentication for Exchange Online is enabled
| ID | MT.1044 |
| Severity | High |
| Suite | Mito |
| Product | Exchange Online |
| Feature | Client access |
| Security area | Authentication |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Low |
| MITRE ATT&CK | T1110 |
| Reads from | Exchange Online |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Modern authentication for Exchange Online MUST be enabled
Rationale: Modern authentication enables enhanced security features like multifactor authentication (MFA), certificate-based authentication (CBA), and third-party SAML identity providers. Without modern authentication, users are more vulnerable to password-based attacks.
Remediation action
Section titled “Remediation action”- Connect to Exchange Online:
Connect-ExchangeOnline- Enable modern authentication:
Set-OrganizationConfig -OAuth2ClientProfileEnabled $true- Verify the setting:
(Get-OrganizationConfig).OAuth2ClientProfileEnabledThe result should be True.
Related links
Section titled “Related links”- Enable or disable modern authentication in Exchange Online
- Modern authentication overview
- Microsoft Secure Score - Enable modern authentication
Mito check. Author: weyCC81; contributors: bastienperez. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.