B2B guest account MFA instead OTP

Jesus Marin 1 Reputation point
2021-03-01T17:07:52.48+00:00

Is there a way to configure my guests accounts in AzureAD to use MFA authenticator app, instead of OTP?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,437 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmanpreetSingh-MSFT 56,306 Reputation points
    2021-03-02T06:17:02.657+00:00

    Hi @Jesus Marin · Thank you for reaching out.

    For this purpose, you need to sign in to MFA Service Settings page by using Global Administrator or Authentication Policy Administrator account and configure below options:

    73291-image.png

    Once this option is configured, users registering for MFA will only get the options to use MFA Authenticator app during MFA proof up.

    Note: There is no option to configure separate MFA methods for Member and Guest users.

    Already registered users might not get the option to re-register for MFA. To force already registered users to register again, use below cmdlet:

    1. Run Connect-MsolService and sign in with Global Admin account.
    2. Run Set-MsolUser -UserPrincipalName username@domain.onmicrosoft.com -StrongAuthenticationMethods @() to clear MFA authentication method.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.