Microsoft Outlook Web App (OWA) Two-Factor Authentication (2FA)

Documentation > Connectors > Two factor authentication for Microsoft Outlook Web App (OWA) Table of Contents

• Overview
• User Experience
• Video Instructions
• Architecture
  • Authentication Flow
• Prerequisites
• Create Application
• Installation
• Usage
• Logging
• Passthrough
  • Static User List
  • Group List
  • IP Address List
• Upgrade
• Uninstallation
• Troubleshooting
• Related Connectors

• Documentation
• Platform
• Downloads
• Knowledge Base
• Help

Last Updated: March 27, 2025

Overview

The LoginTC OWA Connector protects access to your Microsoft Outlook Web App by adding a second factor LoginTC challenge to existing username and password authentication. Explore how LoginTC can add MFA to your Microsoft Outlook Web App (OWA) below.

Subscription Requirement Your organization requires the Business or Enterprise plan to use the LoginTC OWA Connector. Explore Pricing Plans

User Experience

After entering the username and password into the Outlook Web App login, the user is shown a selection of second factor options. The user clicks a button to receive a LoginTC push notification, authenticates and is logged in.

• Push Number Matching
• Software OTP
• Hardware OTP
• SMS OTP
• OWA 2010

Video Instructions Architecture

Authentication Flow

1. A user attempts access to OWA with username / password
2. The username / password is verified against an existing first factor directory (i.e. Active Directory)
3. The request is trapped by LoginTC OWA Connector and an authentication request is made to LoginTC Cloud Services
4. Secure push notification request sent to the user’s mobile or desktop device
5. User response (approval or denial of request) sent to LoginTC Cloud Services
6. The LoginTC OWA Connector validates the user response
7. User is granted access to OWA

ActiveSync and Outlook App Access The LoginTC OWA Connector adds a two-factor authentication prompt to Outlook on the web (formerly Outlook Web App). The LoginTC OWA Connector does not have any impact on ActiveSync, Outlook App authentication or other Exchange mail protocols such as POP3 and IMAP. In most cases, these other protocols should be either disabled or protected in another way to ensure that all access to your Exchange is protected with two-factor authentication.

See the LoginTC OWA Connector ActiveSync and Outlook App Access knowledge base article for more information.

Prefer Reading a PDF? Download a PDF file with configuration instructions: