Default MFA Auth Providers Wizard

Question

Default MFA Auth Providers Wizard

Philipp Kretschmer 80

In my company, we want to introduce MFA.

The requirements are:

Being able to chose (only) between an Authenticator App and a Hardware Token when setting up the MFA (Wizard)
Being able to set up an App Password afterwards, however not being forced to do so while initially setting up the MFA

I enabled the policies that I want, however it doesn't seem to effect the process of setting up the MFA: Authentication Policies

In the following picture I have used an account where I enforced the MFA. As you can see, the only two options available are the Authenticator App and Phone. How can I get the other options to appear (e.g. the Hardware Token)? User's image

After that I am always forced in a second step to create an App password. Is it possible to skip this part, while still being able to create an App password afterwards? User's image

Thanks

Philipp

1 answer

Your answer

Answer 1

Andy David - MVP 155.4K MVP

Why are you using app passwords? Thats a legacy thing and do not work with modern auth methods.

https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-app-passwords

User's image

Philipp Kretschmer 80 Reputation points

2023-10-27T08:47:00.0833333+00:00

Hi Andy, sometimes we need App Passowrds for printer SendAs SMTP Auth. or some other third-party applications which do not support modern auth.

But actually we only need to allow certain users to add app passwords to their account, this shouldn't be part of the generic initial mfa wizard.

My issue isn't related to app passwords, I am more concerned about the initial wizard steps for setting up MFA (for an user at the first logon), where MS AUth app + App Passwords are the two mandatory steps. I only would like to have MS AUth or alternatively hardware token (yubikey). as offered factors.-

Cheers, Philipp

Share via

Default MFA Auth Providers Wizard

1 answer

Your answer