Managing external identities to enable secure access for partners, customers, and other non-employees
Hello @Ahmad Muztaba,
We understand you want to modify your Azure AD B2C custom policy by integrating Microsoft Authenticator push notifications with number matching, replacing the current TOTP-based setup where users manually enter a six-digit code. While this would offer a more secure and user-friendly experience, it's important to note that Azure AD B2C currently does not support push-based multi-factor authentication with Microsoft Authenticator neither with nor without number matching through custom policies. The currently supported MFA methods through custom policies for B2C are below.
Multi-factor-authentication-b2c-custom-policy
The push feature is available in standard Azure AD environments via Conditional Access but not in B2C, which only supports TOTP MFA via code entry. As a result, push notifications are not triggered in your current configuration because the underlying Identity Experience Framework in B2C doesn’t expose the necessary APIs.
Microsoft is evolving B2C and may eventually integrate push-based MFA (with number matching) as this feature has been frequently requested by many customers.