Yadda ake haɗa iPhone ɗinku zuwa Windows tare da iCloud da Outlook ta amfani da OAuth 2.0

¿Yadda ake haɗa iPhone ɗinku zuwa Windows tare da iCloud da Outlook ta amfani da OAuth 2.0? Matsalolin haɗa iPhone da PC ya ƙare a ƙarshe godiya ga canjin da aka daɗe ana jira: Outlook yanzu ya haɗa da ingantaccen zamani don iCloud. Wannan matsawa zuwa OAuth 2.0 Yana kawar da takamaiman kalmomin shiga app, yana hanzarta saitin asusu, kuma yana rage kurakurai. Za ku lura da bambanci daga minti na farko: kawai shiga tare da ID na Apple akan shafin Apple, ba da izini, kuma an saita ku duka.

Bugu da ƙari, ƙarin kwanciyar hankali, kwanciyar hankali yana zuwa. OAuth yana aiki tare da alamun sakewaYana guje wa fallasa kalmar sirrinku kuma yana ba ku damar soke shiga daga dashboard ɗin ID na Apple a duk lokacin da kuke so. Microsoft ya sanar da wannan sabon fasalin a cikin sabon Outlook don Windows, tare da Outlook don Mac da kuma aikace-aikacen wayar hannu, tare da ƙaddamar da ƙaddamarwa wanda kuma zai buƙaci masu amfani su sake tabbatarwa a cikin watanni masu zuwa.

Me zai canza lokacin da kuka haɗa iCloud da Outlook ta amfani da OAuth 2.0

An sabunta gwaninta daga sama zuwa kasa. Ƙara asusun @ icloud.com zuwa Outlook yana buɗe ayyukan Apple a cikin mai bincike, tare da saba, ƙirar banza. Kuna ba da izini, kuma suna daidaitawa. Wasika, Kalanda, da Lambobi a cikin daƙiƙa, ba tare da taɓa plugins ko ƙirƙirar maɓalli masu ban mamaki ba.

Dangane da aminci, tsalle yana da ban mamaki: Ana iya soke alamun shigaWannan yana rage wuraren kai hari kuma yana kawar da kalmomin shiga app. Idan wani abu ya faru, kuna samun damar sarrafa ID na Apple ku, soke izinin Outlook, kuma an warware matsalar.

Ana samun dacewa yanzu Sabuwar Outlook don Windows, Outlook don Mac, da iOS da Android appsIdan har yanzu kuna ganin tsohon akwatin maganganu yana neman kalmar sirri ta aikace-aikacen, sabunta kuma sake kunna Outlook. Microsoft yana tura sabon abokin ciniki kuma yana ba da shawarar gwada shi don jin daɗin wannan haɗin gwiwar iCloud na asali ba tare da ƙari ba.

Wannan canjin kuma yana sauƙaƙe rayuwa don goyan bayan fasaha: ƙarancin abubuwan da suka faru, ƙarancin gogayya, da 'yan kalmomin sirri da ke yawoWannan shine maɓalli a cikin keɓaɓɓun mahallin BYOD. Bayanan saki don sabon Outlook ya riga ya jera dacewa iCloud ta hanyar OAuth 2.0 akan Windows (sigar 20250926009.05), tare da a hankali tura aiki wanda zai iya ɗaukar ɗan lokaci kafin isowa.

Yadda ake ƙara asusun iCloud ɗin ku zuwa sabon Outlook

An sauƙaƙa tsarin yin rajista, amma har yanzu yana da amfani don sanin kanku da allon fuska. A cikin sabon Outlook, je zuwa Duba> Duba Saituna ko Fayil> Bayanin Asusu, sannan je zuwa Accounts> Accounts ɗin ku sannan danna kan. Sanya akawuShigar da adireshin iCloud kuma danna Ci gaba. Za ku ga aikin Apple tare da OAuth 2.0, inda Kuna buƙatar kawai shiga tare da ID na Apple da ba da izinin shiga imel, kalanda, da lambobi.

Idan har yanzu kuna ganin kalmar wucewa akan wasu na'urori maimakon na zamani, akwai yuwuwar biyu. Ko dai ficewar ba ta isa na'urarka ba tukuna, ko kuma kana amfani da na'urar Classic Outlook don WindowsA wannan yanayin, ana iya tambayarka takamaiman kalmar sirri ta app; A kasa mun bayyana yadda za a samar da shi daga Apple ID.

Bayan Apple Tantance kalmar sirri ne cikakke, Outlook nuna wani tabbaci cewa an samu nasarar kara asusun. Daga nan, aiki tare ta atomatik da iCloud data za su bayyana a cikin Outlook ba tare da wani karin matakai.

Menene idan kun tsaya tare da Outlook na gargajiya: kalmomin shiga aikace-aikacen

Ga waɗanda har yanzu suke amfani da classic version of Outlook, ƙara iCloud iya nuna wani kalmar sirri akwatin da ba ya yarda da saba kalmar sirri. Wannan yana nuna cewa asusunku yana buƙatar ƙarin tsaro kuma kuna buƙatar amfani da mai sarrafa kalmar sirri. takamaiman kalmar sirri hade da Apple ID.

1. Rufe saƙon kuskure a cikin Outlook kuma je zuwa gidan yanar gizon Apple ID a cikin burauzar ku. Shiga tare da Apple ID kuma shigar da code. mataki biyu idan kana da shi yana aiki.
2. A cikin Login da Tsaro sashen, je zuwa Takaitattun kalmomin shiga daga aikace-aikacen kuma zaɓi Ƙirƙiri.
3. Sanya suna (misali, Outlook Windows), danna Ƙirƙiri, kuma kwafi maɓallin. Yawancin lokaci yana da Haruffa 16 masu dauke da sarke, yanayin yanayi.
4. Koma zuwa classic Outlook, je zuwa Fayil> Ƙara Account, rubuta a cikin adireshin imel na iCloud, kuma lokacin da ya sa, manna maɓalli da aka samar.
5. Idan komai ya yi kyau, za ku ga sanarwa cewa an yi nasarar ƙara asusun. Tun daga wannan lokacin. Outlook zai daidaita iCloud.

Ka tuna: a cikin sabon Outlook tare da OAuth 2.0, ba kwa buƙatar ƙirƙirar waɗannan kalmomin shiga. Koyaya, idan har yanzu kuna amfani da abokin ciniki na gargajiya, Wannan hanya za ta ci gaba da aiki har sai kun gama hijira.

iCloud don Windows: Daidaita lambobi da kalanda tare da Outlook

Wata hanya don haɗa bayanai idan kuna neman daidaita littafin rubutu da kalanda shine amfani da iCloud don Windows. Tare da wannan shirin, zaku iya Kalanda da Lambobin Aiki tare tsakanin iPhone da Outlook na asali.

1. Zazzagewa kuma shigar da iCloud don Windows daga gidan yanar gizo na apple.
2. Bude iCloud don Windows kuma shiga tare da Apple ID.
3. Zaɓi zaɓin aiki tare Lambobin sadarwa da Kalanda kuma latsa Aiwatar don fara saitin.
4. Bude Outlook; a cikin 'yan lokuta, da iCloud bayanai ya kamata a can. bayyana aiki tare.

Idan kun makale, Apple yana kula da takamaiman jagorar matsala don lokacin da ba za ku iya ƙara Mail, Lambobin sadarwa, ko Kalanda daga iCloud zuwa Outlook ba. Samun adireshin @ icloud.com da aka saita azaman adireshin imel ɗinku na farko shima yana da mahimmanci kafin ku fara, don haka Duba shi a cikin asusun ku.

Daidaitawar Microsoft Exchange akan iPhone, iPad, Mac, da Apple Vision Pro

Don kasuwancin da ke haɗa na'urorin Apple tare da Microsoft 365 ko a kan sabobin gida, haɗin gwiwar musayar ya kasance ginshiƙi. iOS, iPadOS, da visionOS suna tallafawa musayar Kan layi da nau'ikan uwar garken na yanzu, kuma a ciki macOS Mail da Kalanda Hakanan akwai goyan baya don Musanya Kan layi, Exchange Server 2019 da 2016.

Tare da iOS 14, iPadOS 14 da kuma daga baya, musayar asusun da aka haɗa zuwa ayyukan girgije na Microsoft (kamar Office 365 ko Outlook.com) ana sabunta su ta atomatik don amfani da OAuth 2.0 sabis na tabbatarwa Daga Microsoft. A cikin iOS 11, iPadOS 13.1, da macOS 10.14 ko kuma daga baya, ana goyan bayan kwararar amincin zamani a cikin masu haya na Musanya masu jituwa; tare da iOS 12, iPadOS 13.1, da macOS 10.14 ko kuma daga baya, ana iya yin sanyi ta hanyar bayanin martaba ko da hannu.

Idan kuna buƙatar ƙarin cikakkun bayanai akan ingantaccen aiki na zamani, Microsoft yana ba da jagororin don kunna ko kashe Tabbacin zamani a cikin Musanya Kan layi, da kuma amfani da shi tare da abokan ciniki na Office.

Kalanda da fasali na Mail tare da Exchange akan Apple

A kan iPhone, iPad, da Apple Vision Pro (visionOS 1.1 ko daga baya) ta hanyar Exchange ActiveSync, kuma akan Mac ta hanyar Sabis na Yanar Gizo na Musanya, ana tallafawa manyan fasalulluka: gayyata, samuwa, abubuwan sirriMaimaitawar al'ada, lambobin mako, haɗe-haɗe da ingantaccen wuri, sabunta kalanda, ayyuka a cikin Tunatarwa, da wakilan kalanda akan Mac.

• Ƙirƙiri ku karɓi gayyata kalanda ba tare da wata matsala ba.
• Bincika kasancewar baƙo don tsara tarurruka.
• Ƙirƙiri abubuwan sirri da kuma saita ci-gaba ci-gaba.
• Karɓi sabuntawa kuma kula da ayyuka a ciki tunatarwa.
• Haɗe-haɗe, wuraren da aka tsara, da wakilai (a kan Mac).

Bugu da ƙari, akan iPhone, iPad, da Apple Vision Pro, Kalanda yana ba ku damar tura gayyata ta musayar (2010 ko daga baya), da ba da shawara. madadin jadawalin kuma yana ba da shawarar wurare masu wayo dangane da wurin ku da na masu halarta.

Gano kai tsaye, Tura kai tsaye, GAL da gogewa mai nisa

Na'urorin Apple suna goyan bayan sabis ɗin ganowa na Musanya. Lokacin da kuka saita shi da hannu, Gano kansa Yi amfani da imel ɗinku da kalmar wucewa don nemo saitunan uwar garken. Don ƙarin cikakkun bayanai, duba takaddun hukuma akan Autodiscover a cikin Exchange Server.

Tare da tura kai tsaye, idan akwai bayanan wayar hannu ko Wi-Fi, Musanya Server isar da jirgi Ana isar da imel, ayyuka, lambobin sadarwa, da abubuwan da suka faru zuwa na'urorin ku. A cikin mahallin da aka sarrafa, Hakanan zaka iya goge iPhone ko iPad daga mugun canji, maido da shi zuwa saitunan masana'anta, ko zaɓi share shi. Musanya asusu da bayanai kawai.

Apple kuma yana tuntubar da Jerin adireshi na duniya (GAL) Don cika imel da kuma dawo da takaddun S/MIME idan an buga su. Hotunan GAL suna buƙatar Exchange Server 2010 SP1 ko kuma daga baya. A ƙarshe, zaku iya saita amsa ta atomatik daga waje daga na'urorin da kansu don kammala aikin.

Microsoft Enterprise SSO don na'urorin Apple: Ƙaddamar sa hannu guda ɗaya

Ƙarin Microsoft Enterprise SSO don iOS, iPadOS, da macOS yana kawo SSO zuwa asusun Microsoft. Samun damar aikace-aikacen da ke yin amfani da tsarin SSO na kamfanin Apple. yana ƙara SSO Yana goyan bayan aikace-aikacen gado waɗanda har yanzu ba su yi amfani da dakunan karatu na zamani ba, kuma suna haɗewa ta asali tare da MSAL don ƙwarewar da ba ta dace ba.

Daga cikin fa'idodinsa: SSO don shigar da aikace-aikacen Apple Enterprise SSO masu jituwa, kunnawa ta hanyar MDM (an haɗa) na'urar da rajistar mai amfani), fadada SSO zuwa apps ta amfani da OAuth 2.0, OpenID Connect, da SAML, da haɗin kai kai tsaye tare da MSAL. Microsoft da Apple sun yi aiki tare don haɓaka kariya.

Bukatun da URLs waɗanda dole ne a ba su izini

Don amfani da shi, dole ne na'urar ta goyi baya kuma ta shigar da ƙa'idar da ta haɗa da plugin (Microsoft Authenticator akan iOS/iPadOS; Portal Company Intune akan macOS), zama. rajista da MDM kuma a kunna saitunan plugin ɗin a cikin bayanan martaba. Bugu da ƙari, Apple yana buƙatar ƙyale da keɓance wasu URLs daga binciken TLS daga mai ba da shaida da Apple don SSO suyi aiki.

• A cikin sigogin bayan 2022 kuma ba tare da Platform SSO ba: app-site-association.cdn-apple.com, app-site-association.networking.appleda kuma config.edge.skype.com don sadarwa tare da ECS.
• A cikin sigogin da suka gabata ko tare da Platform SSO: ƙari, login.microsoftonline.com, login.microsoft.com, sts.windows.net, Sarakunan girgije (login.partner.microsoftonline.cn, login.chinacloudapi.cn, login.microsoftonline.us, login-us.microsoftonline.com), da config.edge.skype.com.

Idan an toshe waɗannan adireshi, kurakurai kamar haka na iya faruwa: 1012 NSURLErrorDomain, 1000 com.apple.AuthenticationServices.AuthorizationError o 1001 UnexpectedApple kuma yana rubuta URLs don ba da izini a cikin jagoran samfurin sa don cibiyoyin sadarwar kasuwanci.

Bukatun ta dandamali

A kan iOS, kuna buƙatar iOS 13.0 ko kuma daga baya da Microsoft Authenticator app. A kan macOS, kuna buƙatar macOS 10.15 ko daga baya da app. Portal na kamfani daga Intune. Tare da Intune, zaku iya kunna plugin ɗin daga bayanan da aka gina; tare da wasu tsarin MDM, saita nauyin SSO mai ƙarfi tare da waɗannan masu ganowa:

• iOS: Extension Identifier com.microsoft.azureauthenticator.ssoextension (baya buƙatar gano kayan aiki).
• macOS: Mai gano Extension com.microsoft.CompanyPortalMac.ssoextension e mai gano kayan aiki UBF8T346G9.
• Nau'in juyawa zuwa: https://login.microsoftonline.com, https://login.microsoft.com, https://sts.windows.net, da madaidaitan gajimare na ƙarshen inda ya dace.

Ƙarin zaɓuɓɓukan sanyi na SSO

Plugin na iya samar da SSO zuwa apps ba tare da amfani da MSAL ba lissafin iziniA kan na'urori masu Authenticator ko Portal na Kamfani wanda MDM ke sarrafawa da sarrafa su, ayyana waɗannan maɓallan don sarrafa iyawar su:

Key	Tipo	mazakuta
Enable_SSO_On_All_ManagedApps	Intanet	1 Don kunna SSO akan duk aikace-aikacen da aka sarrafa, 0 don kashe shi.
AppAllowList	kirtani	An ba da izinin ID na fakiti don SSO (jerin waƙafi).
AppBlockList	kirtani	An katange ID ɗin fakiti don SSO (jerin waƙafi).
AppPrefixAllowList	kirtani	Abubuwan da aka yarda fakitin ID prefixes. Ta hanyar tsoho, iOS: com.apple.macOS: com.apple., com.microsoft.
AppCookieSSOAllowList	kirtani	Prefixes don apps tare da hadaddun cibiyoyin sadarwa waɗanda ke buƙatar SSO ta hanyar kukis; kuma ƙara zuwa AppPrefixAllowList.

Idan ba ku son SSO a cikin Safari, ƙara shi zuwa AppBlockList tare da ID: iOS com.apple.mobilesafari y com.apple.SafariViewService, macOS com.apple.safariDon ba da izinin farawa na farko daga ƙa'idodin MSAL da Safari, barin kunna browser_sso_interaction_enabled saita zuwa 1 (shine tsoho). Wannan yana sauƙaƙa wa plugin ɗin yin aiki. sami raba takardun shaidarka lokacin da ya cancanta.

Idan kun ga abubuwan da ba zato ba tsammani a cikin aikace-aikacen OAuth 2.0, zaku iya rage su da disable_explicit_app_prompt (ƙimar tsoho 1) ko tilasta shiga ta atomatik tare da disable_explicit_app_prompt_and_autologin (darajar 1 don kunna shi). A cikin aikace-aikacen MSAL, akwai daidaitattun na asali (disable_explicit_native_app_prompt y disable_explicit_native_app_prompt_and_autologin), kodayake ba a ba da shawarar taɓa su ba idan kuna amfani da su Umarnin kariya Na aikace-aikace.

A kan iOS, idan ƙwarewar ta inganta ta hanyar tura buƙatun hulɗa zuwa ga Microsoft Authenticator, aiki disable_inapp_sso_signin tare da ƙimar 1 don aikace-aikacen MSAL su aika da ingantacciyar ma'amala ga Mai tabbatarwa. Ba a shafi buƙatun shiru.

Rijistar-In-Lokaci kawai da karatun metadata

Plugin ɗin na iya gudanar da rajistar na'urar Microsoft kawai-In-Lokaci. Shiga tare da Intune ta amfani da device_registration bayyana a matsayin {{DEVICEREGISTRATION}}Idan mafita ɗinku sun dogara da sarƙoƙin maɓalli, Microsoft za ta yi ƙaura zuwa ma'ajiyar maɓalli na ainihi na na'urar zuwa Amintaccen Talla Apple zai mayar da shi tsoho don sababbin sa hannu wanda zai fara a watan Agusta 2025. Na'urori ba tare da Enclave ba za su ci gaba da amfani da keychain na mai amfani.

Don karanta metadata na log tare da MSAL, ana samun wannan API: - (void)getWPJMetaDataDeviceWithParameters:(nullable MSALParameters *)parameters forTenantId:(nullable NSString *)tenantId completionBlock: (nonnull MSALWPJMetaDataCompletionBlock) completionBlock;. Tare da ita Za ku sami cikakkun bayanai amintaccen rajistar na'ura.

Shirya matsala Secure Enclave and Exclusion

Idan, bayan kunna Secure Enclave ajiya, kun ga kurakurai da ke nuna cewa dole ne a sarrafa na'urar (misali, lambar kuskure 530003 tare da dalilin "ana buƙatar sarrafa na'ura don samun damar wannan albarkatun"), duba cewa an kunna haɓakar SSO kuma kun shigar da abubuwan da suka dace (kamar Microsoft SSO don Chrome akan macOS). Idan matsalar ta ci gaba, tuntuɓi mai siyar da app don yuwuwar taimako. rashin daidaituwar ajiya.

Don dalilai na gwaji, zaku iya kashe amfani da mafi amintaccen ma'aji tare da maɓallin MDM na ɗan lokaci. use_most_secure_storage Idan na'urar ta kasance 0, soke ta (daga Authenticator ko Portal Company) kuma sake yi mata rijista. Idan kana buƙatar keɓance mai haya daga amintaccen ma'ajiya, Bude akwati na tallafi daga Microsoft; warewa na ɗan lokaci ne (har zuwa watanni 6) kuma wasu na'urori na iya buƙatar sake shigar da rajistarsu.

Masu bincike da manufofin samun damar sharadi

Tare da kunna Secure Enclave, masu bincike suna buƙatar daidaitawa don ingantaccen manufofin na'urar suyi aiki. A cikin Safari (iOS da macOS), haɗin SSO na asali ne. A cikin Google Chrome don macOS, shigar da Microsoft SSO tsawo Ko amfani da Chrome 135 ko sama tare da tallafin SSO na kamfani ta atomatik. A kan Microsoft Edge don iOS da macOS, tallafi ya dogara da tsarin SSO na tsarin da tsarin MDM a kowane yanayi.

Batun da aka sani a cikin macOS 15.3 da iOS 18.1.1

Akwai sabuntawa da ke tasiri ga tsarin tsawaita SSO na kamfani, yana haifar da kurakuran tantancewa na bazata a cikin ƙa'idodin da aka haɗa tare da ID ɗin Entra da yuwuwar kuskuren mai lakabin 4s8qh. Dalilin ya bayyana koma baya a ciki PluginKit wanda ke hana SSO tsawo daga farawa. Don gano shi, gudanar da sysdiagnose don saƙonni kamar: Kuskuren Domain=Lambar PlugInKit=16 "sauran sigar da ake amfani da ita". Idan masu amfani da ku sun shafi, sake yi na'urar Yana mayar da aiki.

Nasihu masu amfani da al'amuran gama gari

Idan kuna sarrafa tarin na'urori, yana da kyau ku ɗauki fakitin ID don masu ba da izini. Kuna iya kunna alamar MDM na ɗan lokaci. admin_debug_mode_enabled A mataki na 1, shiga cikin ƙa'idodin da aka yi niyya kuma a cikin Microsoft Authenticator je zuwa Taimako> Aika rajistan ayyukan> Duba rajistan ayyukan. Nemo layi [ADMIN MODE] Tsawaita SSO ya kama bin abubuwan gano tarin app Don tattara tarin, saita su a cikin MDM ɗin ku. Kar a manta da musaki yanayin bayan kun gama.

Kuna son kunna SSO don kusan komai, tare da wasu keɓantawa? Kunna Enable_SSO_On_All_ManagedApps a cikin 1 da amfani AppBlockList tare da apps da ya kamata a cire. Don kunna SSO akan sarrafawa da wasu ƙa'idodin da ba a sarrafa su ba, haɗa Enable_SSO_On_All_ManagedApps=1 con AppAllowList kuma ku toshe abin da ya dace da ku AppBlockListIdan kana buƙatar kashe SSO a sarari a cikin Safari, ƙara shi zuwa AppBlockList tare da masu gano sa.

Lokacin aiki tsakanin iPhone da Windows PC, Outlook da iCloud ta hanyar OAuth 2.0 yana rage juzu'i. Kuna tafiya daga matakai masu banƙyama da yawa zuwa jagorar kan jirgi tare da izini na kashewa, kiyaye iko daga bayanan martaba na Apple. A cikin kamfanoni, haɓakar SSO na Enterprise yana samun nasara daidaituwar zaman tsakanin apps, yana sauƙaƙe MFA, yana mutunta damar sharadi, da sauƙaƙa rajistar na'ura.

Idan kuna zuwa daga duniyar kalmar sirri ta app, sabon yawo zai ba ku mamaki da sauƙi. Kuma idan saboda wasu dalilai dole ne ku tsaya tare da Outlook na yau da kullun, har yanzu kuna iya ... samar da takamaiman kalmomin shiga da kuma ci gaba, yayin da ake tsara sauye-sauye zuwa sabon abokin ciniki don cin gajiyar ingantaccen tabbaci na zamani.

Wadanda suke rayuwa tsakanin iPhone da PC yanzu suna da sauƙin daidaita imel, kalanda, da jadawalin; manajojin jiragen ruwa suna samun iko da tsaro tare da SSO; kuma waɗanda ke amfani da Exchange akan Apple suna riƙe da abubuwan ci gaba kamar su Gano kai tsaye, tura kai tsaye da GAL ba tare da sadaukar da kwarewar ɗan ƙasa ba. Haɗin a ƙarshe ya yi daidai ba tare da wani baƙon ƙari ko kwafin kalmomin shiga ba.