MFA for users using using SSO in Entra Extern IS

Question

Hi,I have MS Entra External ID preview tenant created. I have set up SSO. I registered app and add a platform for SPA. I have also created Conditional Access policy. The issue I am running into is MFA. When user SSO and gives email and password, it is asked for code sent to the email address. h=However, I want to use Authenticator App instead.

I haven't been able to change this behavior and would appreciate some advice.

Thank You.

Answer 1

Hi @Muhammad Zeagham

Thank you for posting this in Microsoft Q&A.

"I understand you are asking how to change the behavior of their Azure AD External ID preview tenant's SSO process. Specifically, you want to use the Authenticator App for MFA instead of receiving a code sent to their email address as a second factor of authentication.

This is the expected behavior. As of now, External tenants support two methods for authentication as a second factor: Email one-time passcode and SMS-based authentication.

Unfortunately, so far, you can't use the authenticator app for MFA instead of receiving a code sent to their email address as a second factor of authentication."

For more information: https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-multifactor-authentication-customers

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.