How to fix problems with configuring connectors or removing your tenants when using MFA
You have an Office 365 tenant in which you have multi-factor authentication (MFA) enabled for the global admin account. The global admin's credentials are used to add and manage this tenant in CodeTwo Email Signatures for Office 365. When you try to automatically create Exchange Online connectors and transport rules for your tenant via the program's User Panel, the connectors' configuration wizard fails (Fig. 1.) and you see the following (or similar) error:
Connecting to remote server ps.outlook.com failed with the following error message: [ClientAccessServer=XXXXX,BackEndServer=YYYYY,RequestId=ZZZZZ, TimeStamp=MM/DD/YYYY H:MM:SS PM] Access Denied For more information, see the about_Remote_Troubleshooting Help topic.
Running the configuration wizard again does not fix this issue.
A similar problem occurs when you try to deregister your tenant from the User Panel (Fig. 2.).
The problem occurs because you enabled multi-factor authentication for the global admin account of your Office 365 tenant. Our software uses PowerShell to create, manage or remove Exchange Online connectors and transport rules. MFA makes it impossible for the program to access your tenant via PowerShell.
To fix the problem with creating Exchange Online connectors or transport rules for your Office 365 tenant, you can:
- configure the connectors and transport rules manually, as described in this article,
- temporarily disable the MFA mechanism for the global admin account of your tenant and restart the connectors' configuration wizard.
To deregister your tenant from the program, you have the following options available:
- temporarily disable MFA for the global admin account of your tenant and deregister the tenant,
- contact our Customer Support to help you deregister your tenant.
- Applies to: CodeTwo Email Signatures for Office 365 1.x
- Categories: How-To, Troubleshooting
- Last modified: 2017-07-05
- Created: 2016-12-16
- ID: 608
- Keywords: multi-factor authentication, Exchange Online connectors, email connectors, transport rules, inbound, outbound, Exchange Server Transport Rule