MFA with Microsoft 365 Business Basic subscription

Question

MFA with Microsoft 365 Business Basic subscription

Aksel Hjalmarsson Tórgarð 21

Hello,

I am trying to set up multi-factor authentication for our organization.

We do not have access to the MFA dashboard on Azure AD, as our license does not include this. Neither do we have access to Conditional Access policies.

What MFA methods are available to us?

Specifically, I would like to use either FIDO2 security keys (e.g. YubiKeys) or OATH (e.g. time-based one-time-passwords through an authenticator app). Is this possible?

Thanks,
Aksel

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Vipul Sparsh 16,336 Microsoft Employee Moderator

@Aksel Hjalmarsson Tórgarð FIDO 2 needs combined user experience to be enabled as pre-requisite which is a premium feature.
hardware OATH tokens also need either Azure AD P1 or P2. You would need to upgrade license in order to use them.

Aksel Hjalmarsson Tórgarð 21 Reputation points

2021-03-23T14:03:21.11+00:00

Thank you for clarifying.

What MFA methods are available, if we enable Security Defaults?
Vipul Sparsh 16,336 Reputation points Microsoft Employee Moderator

2021-03-24T04:26:32.26+00:00

@Aksel Hjalmarsson Tórgarð Security default will work with Authenticator App only.
All users in your tenant must register for multi-factor authentication (MFA) in the form of the Azure AD Multi-Factor Authentication. A user's 14-day period begins after their first successful interactive sign-in after enabling security defaults.
Users have 14 days to register for Azure AD Multi-Factor Authentication by using the Microsoft Authenticator app.
After the 14 days have passed, the user won't be able to sign in until registration is completed.
Aksel Hjalmarsson Tórgarð 21 Reputation points

2021-03-25T18:28:04.577+00:00

Just to clarify, when you say Authenticator App only, what do you mean?

Is it any OATH app (e.g. Microsoft Authenticator, Google Authenticator, Yubico Authenticator), or is it Microsoft Authenticator only?

And if it is Microsoft Authenticator, what types of MFA are supported within it with Security Defaults?
Vipul Sparsh 16,336 Reputation points Microsoft Employee Moderator

2021-03-30T07:46:31.54+00:00

@Aksel Hjalmarsson Tórgarð Microsoft Authenticator and it will support verification code from the app.
Libby Brown - MSFT 1 Reputation point

2021-04-15T18:43:10.28+00:00

You should also be able to use any authenticator for OTP code generators.

Also, there is no licensing requirement to use the combined registration experience.