Setting up conditional access MFA without push notificaiton

Question

Setting up conditional access MFA without push notificaiton

Ben Middleton 1

Hello,

I am looking for a specific configuration in Azure AD.

Specifically to set up combined registration for MFA/SSPR for MS authenticator that ONLY has the option to have a TOTP code.

Is there a way to do this using the MS authenticator setup method?

2 answers

Your answer

Answer 1

Cristian SPIRIDON 4,486 Volunteer Moderator

Hi @Ben Middleton ,

If you don't want push notifications you can register MSAuthenticator as OATH Software Token provider.

In this way Azure will not send any notifications and only wait for the code.

Hope this helps!

Ben Middleton 1 Reputation point

2022-09-26T13:56:51.55+00:00

Hi CristianSPIRIDON72,

Thank you for your reply!

I should have been more specific, I would like to set it up for all users in a given tenant to have this option set up by default:
Do you know if there is a way to do this without having each end user make this change themselves?
Cristian SPIRIDON 4,486 Reputation points Volunteer Moderator

2022-09-26T17:54:35.62+00:00

Hi @Ben Middleton

You can enable/disable the available verification options:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#mfa-service-settings

Please see the section for Verification Methods.

Hope this helps!

Answer 2

Ben Middleton 1

Hi CristianSPIRIDON72,

Thanks for the feedback, after reviewing the link you sent me I found that checking or unchecking the authentication method does not seem to remove the option from the authenticator app when I attempt to sign into the test account I created.

I could be missing a step but here is where I made the change:

Share via

Setting up conditional access MFA without push notificaiton

2 answers

Your answer