Can I provide another layer of security for Oauth2 authentication?

Question

We will be rolling out MFA for all our users. However, MFA cannot be used for some accounts, e.g. accounts that are used for handshaking with 3rd party products that use Oauth2 authentication with O365.

Is there a way of providing another security layer over Oauth2 authentication?

Answer 1

Hi SouthernPortsDEV-7944

Once Oauth2 authentication protocol activated, ideally you will work with Oauth2 token lifetime policy or similarities with the credited token to your specific user. You can set specific date and time HH:MM:SS:MS
within the token policies with desired time duration.

It's more convenient for you this way, you can still add other security layer, with api, administration center and much more.

I hope this will help you!
Regards, Armand B.

---

If my answer did help you, Please Upvote it, this will help other user to access informations quickly.