Can you apply a 3-factor authentication method

Question

I have a query regarding the current authentication options available and the possibility of further enhancing account security.

Moreover, I am interested in exploring the option of implementing a 3-factor authentication method to fortify user account security even further.

I would like to know whether it is possible to introduce a third layer of authentication in addition to the standard password and authenticator app OTP, Temporary Access Pass (TAP), etc. This additional layer could involve sending a one-time verification code via SMS or a voice call to the user's registered phone number, thus requiring the user to authenticate themselves in three distinct ways.

Answer 1

Hi,

That SMS option is already there and you could use FIDO keys or Certificate based Auth if you want to add additional layer of MFA, including the Auth App Passcode.

Check this document for detailed MFA deployment options - https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4h14N?culture=en-us&country=us

Passwordless - https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passwordless#fido2-security-keys?culture=en-us&country=us

Certificate based auth - https://learn.microsoft.com/en-us/entra/identity/authentication/concept-certificate-based-authentication

Microsoft Auth App - https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passwordless#microsoft-authenticator

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.