How to pick one MFA Authentication Method among other enabled MFA Authentication Methods?

Law Victor 0 Reputation points
2023-09-07T02:45:43.77+00:00

Hi fellows,

I'm now learning the Azure AD, and I've just got a problem on configuring MFA Authentication Methods.

Currently I've enabled authentication methods of "Microsoft Authenticator", "SMS", "Temporary Access Pass" and "Email OTP" under Home > orgName | Security > Security | Authentication methods.

My question is that can I (as a global admin) make a choice on who uses what method when all the for methods are enabled to Target All users?

It seems like the methods are optional when assigning method on a single user, however, the log-in would only automatically pick "Microsoft Authenticator" to go when I use the user account to access resources.

I guess there's a fixed priority when all methods are enabled and all methods Target All users; although the methods options are displayed and can be set when configuring a single user's authentication method, there would be no effect on the priority.

User's image

Microsoft Security | Microsoft Authenticator
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Law Victor 0 Reputation points
    2023-09-07T05:50:48.52+00:00

    I think I've got the answer.

    Legacy Authentication Methods and Current Authentication Methods are running at the same time, and so the user can only enjoy Legacy Methods ......

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.