2-Factor authentication for Exchange ActiveSync
===============================================

Since version 6.7 we've built in a special two-factor authentication mechanism for ActiveSync devices to improve your
security. Unfortunately the protocol doesn't support native 2-factor authentication, but we've found a clever workaround.
When enabled, the user can setup an account with his username and password. But it will only synchronize an informative
message:

.. figure:: ../../_static/system-settings/2fa-eas-message.png
     :width: 400px
     :alt: 2-Factor authentication message

	 2-Factor authentication message

It informs you that the account setup must be completed by logging in to Group-Office to
allow the device to connect:

.. figure:: ../../_static/system-settings/2fa-eas-approve.png
	 :alt: 2-Factor authentication approve device

	 2-Factor authentication approve device

The connected devices can be managed from :ref:`your account settings<my-account>`:

.. figure:: ../../_static/system-settings/2fa-eas-clients.png
	 :alt: Connected clients

	 Connected clients


Enabling 2-Factor authentication for Exchange ActiveSync
--------------------------------------------------------

To enable 2-Factor authentication for Exchange ActiveSync go to
System Settings -> Authentication and check 'Enable 2-Factor authentication for ActiveSync devices'.

.. figure:: ../../_static/system-settings/2fa-eas-system-settings.png
	 :alt: Synchronization system settings

	 Synchronization system settings