Hi @Mike Mannella ,
Welcome to the Microsoft Q&A platform!
Yes, you can set this up by using shared mailboxes in Microsoft 365. Here’s how you can achieve this:
- Create a Shared Mailbox:
- In the Microsoft 365 admin center, go to the Groups section and select Shared mailboxes.
- Click on Add a shared mailbox and fill in the necessary details.
- After creating the shared mailbox, you can add members who need access. Go to the shared mailbox settings and add the users under the Members section.
- Users can access the shared mailbox from their own Outlook application or Outlook Web Access (OWA) by adding the shared mailbox to their account.
- Ensure that each user has MFA enabled on their individual accounts. This can be done in the Azure Active Directory section of the Microsoft 365 admin center.
Go to Users, select the user, and then click on Multi-Factor Authentication to enable it.
- FIDO2 security keys can be used for passwordless authentication. In the Azure Active Directory section, go to Security > Authentication methods > FIDO2 Security Keys.
Enable FIDO2 security keys and configure the settings as required. Users can then register their FIDO2 keys in their security settings.
By following these steps, you can ensure that multiple users can access the shared mailbox securely from different locations with independent user accounts and MFA, including FIDO keys.
Please feel free to contact me for any updates. And if this helps, don't forget to mark it as an answer.
Best,
Jake Zhang