2FA \ MFA for Vendor Management

Question

2FA \ MFA for Vendor Management

Donald Jackson 25

This question is regarding 2FA\MFA. I'm looking for a way that we can have a vendor [1st] use an account we set up for them, [2nd] get an email sent to a distribution group for the second factor versus acknowledging a push or enter a code.

1 answer

Your answer

Answer 1

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,541 Moderator

Hello @Donald Jackson , you can create an account for your vendor following the steps detailed in Invite an external guest user. Email is only available in Self-service Password Reset but not in MFA. Take a look to Microsoft Authenticator app and Available versions of Azure AD Multi-Factor Authentication.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

Donald Jackson 25 Reputation points

2023-06-27T18:37:47.5566667+00:00

Thanks Alfredo... so, to clarify, we're looking for a way to enforce MFA on venders who might need access internally. We're trying to address the following question, so would your recommendation do that? And the term "nonlocal maintenance" could mean any external customer\partner.

NIST 171r2

3.7.5 - Require multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete.

Thanks!
Donald Jackson 25 Reputation points

2023-07-06T17:16:26.9266667+00:00

Alfredo,

If we were to implement this, would this user always get an email that would require him to respond to, that's what we're looking for.

Thank you.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,541 Reputation points Moderator

2023-07-13T16:28:22.3433333+00:00

Hello

@Donald Jackson , apologies for missing your latest comment. Users can get an email when getting invited to the tenant but not for MFA. You can add a 3rd layer of security (email) developing a custom application only. For available applications that's not possible.
JamesTran-MSFT 37,231 Reputation points Microsoft Employee Moderator

2023-07-20T16:48:31.43+00:00

@Donald Jackson

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Share via

2FA \ MFA for Vendor Management

1 answer

Your answer