Share via

Azure AD B2C Custom policy MFA with Try another option

Emanuel Virca 31 Reputation points
2023-02-27T15:38:28.75+00:00

Hello,

I am working on a custom policy with MFA enabled for phone and TOTP mode.

I want to use phone verification as default and allow the user to "Try another method" ("Sign in another way") if they do not have access to their phone/receive the sms code. The other method would mean switching to TOTP mode.

Is there a possibility to implement this in a custom policy?

I would not like to have a dedicated screen where the user selects the preferred method prior to initiating the MFA, but rather use the TOTP as a fallback for when SMS is not received.

I know this behavior is already implemented in Azure AD but I see no options in Azure AD B2C.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments
Accepted answer
  1. Patchfox 4,176 Reputation points
    2023-02-28T20:08:32.16+00:00

    Hi Emanuel Virca I hope I can help you with this problem

    Atm it's not possible to switch from phone-based auth dynamically to TOTP (app factor). You have to redeploy your custom policy first.

    Read also: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/resilient-end-user-experience#:~:text=redeploy%20your%20custom%20policies

    If the reply was helpful, please don’t forget to upvote or accept it as an answer, thank you.

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.