How can I show the Software OATH tokens features for my users sign-in method?

EnterpriseArchitect To make Software OATH tokens appear as a sign‑in method on https://mysignins.microsoft.com/security-info, you must enable the correct Authentication methods policies in Microsoft Entra ID. This option no longer shows by default, especially after migrating from legacy MFA.

To enable it, please follow these steps:

1. Log in to the Azure portal.
2. Navigate to Microsoft Entra ID > Security > Authentication methods.
3. Under Authentication method policies, click on Microsoft Authenticator Settings.
4. Click Configure.
5. Ensure that the option "Allow use of Microsoft Authenticator OTP" is enabled.

Please refer to the screenshot below for better understanding.

Ensure the affected users are included in the policy scope. If the user is not in scope, the Software OATH option will not appear.

After saving the policy and reloading the Security info page, users will be able to add Software OATH tokens as a sign‑in method.

https://docs.azure.cn/en-us/entra/identity/authentication/how-to-authentication-methods-manage?

Software OATH tokens are controlled by the Authentication methods policy in Microsoft Entra ID. To make them available again to users on the Security info page, configure the policy so that software OATH is allowed for the target users.

Use these steps as an Authentication Policy Administrator:

1. Sign in to the Microsoft Entra admin center.
2. Go to Entra ID → Authentication methods.
3. In the Authentication methods policy, ensure the following:
   • Microsoft Authenticator is enabled for the users in scope.
   • Under the Microsoft Authenticator settings, turn on Allow use of Microsoft Authenticator OTP if OTP codes from Microsoft Authenticator should be used.
4. If users should be able to use non-Microsoft apps (third‑party software OATH tokens), also enable Third-party software OATH tokens for those users:
   • Go to Authentication methods → Third-party software OATH tokens.
   • Set Enable to On for the desired users/groups and save.

The legacy single OATH toggle has been split into separate controls for Microsoft Authenticator OTP, third‑party software OATH apps, and hardware OATH tokens. If the relevant controls are disabled, the Software OATH option will not appear as a sign‑in method on the Security info page.

If you explicitly disable Third-party software OATH tokens, users will be prevented from signing in with one-time passwords from third‑party identity providers.

References:

• How to migrate MFA and SSPR policy settings to the Authentication methods policy for Microsoft Entra ID
• How to manage OATH tokens in Microsoft Entra ID (Preview)
• Plan a Microsoft Entra multifactor authentication deployment
• What is Microsoft Entra authentication?
• How it works: Microsoft Entra self-service password reset
• Configure Microsoft Entra multifactor authentication settings
• Authentication methods in Microsoft Entra ID - OATH tokens