Azure AD MFA force to the use of OTP

Question

Azure AD MFA force to the use of OTP

Romar 106

Hello,

We use Azure AD MFA and by default users can confirm a MS Authenticator message to get access to Office 365 for example.
Is it possible to set the One Time Password the MS Authenticator generates as the default instead?

Thank you in advance for pointing me to the right direction!

Accepted answer

0 additional answers

Your answer

Answer 1

Vasil Michev 119.6K MVP Volunteer Moderator

You cannot currently force a specific method, each user is in control of that. Best you can do is disable a given method tenant-wide, but that will affect all users.

Romar 106 Reputation points

2023-01-04T08:26:32.31+00:00

Hi Michev,

Thank you for your reply. I found the setting in the Authentication Methods Policies settings menu in the Azure Portal.
It is fine to force it for all users. However I see the option to target all users or selected groups, I will have to test this.

Regards
Romar
Vasil Michev 119.6K Reputation points MVP Volunteer Moderator

2023-01-04T09:21:04.303+00:00

That part is still in preview and doesn't cover all scenarios. For the time being, you can toggle individual methods on/off from the old MFA settings page (https://account.activedirectory.windowsazure.com/usermanagement/mfasettings.aspx?). The SSPR methods can also come in play in some scenarios: https://portal.azure.com/#view/Microsoft_AAD_IAM/PasswordResetMenuBlade/~/AuthenticationMethods
You can also take a look at authentication strengths, which you can use to enforce specific methods in conjunction with CA policies: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-strengths
Romar 106 Reputation points

2023-01-04T10:30:02.83+00:00

I will check the sites you provided. Thank you again for your help!

Share via

Azure AD MFA force to the use of OTP

0 additional answers

Your answer