How can I perform bulk changes for the Microsoft Authenticator Apps registration?

Question

How can I perform bulk changes for the Microsoft Authenticator Apps registration?

EnterpriseArchitect 6,301

I have several thousands of users in my company that are still using SMS as the primary authentication methods without anything else.

How can I perform the bulk enroll or add the Microsoft Authenticator apps to the below user settings ?

User's image

Thank you in advance.

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Rajat Vashistha-MSFT 1,780 Microsoft External Staff

Hi EnterpriseArchitect,

Thank you for contacting Microsoft Support!

To push the Microsoft Authenticator app for bulk users, you can utilize the Registration campaign feature in Azure Active Directory.

To enable the registration campaign policy, you must use the Authentication Methods Policy using Graph APIs. Those assigned at least the Authentication Policy Administrator role can update the policy.

To configure the policy using Graph Explorer:

Sign in to Graph Explorer and ensure you've consented to the Policy.Read.All and Policy.ReadWrite.AuthenticationMethod permissions. To open the Permissions panel:

Retrieve the Authentication methods policy: JSONCopy

   GET https://graph.microsoft.com/v1.0/policies/authenticationmethodspolicy

Update the registrationEnforcement and authenticationMethodsRegistrationCampaign section of the policy to enable the nudge on a user or group. To update the policy, perform a PATCH on the Authentication Methods Policy with only the updated registrationEnforcement section: JSONCopy
```
   PATCH https://graph.microsoft.com/v1.0/policies/authenticationmethodspolicy
   
   
```

In addition to using the Graph Explorer, you can also enable the registration campaign policy using the Microsoft Entra admin center. Please refer to the article below for more details.

https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-mfa-registration-campaign

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

EnterpriseArchitect 6,301 Reputation points

2025-01-15T11:25:42.1+00:00

Thank you @Anonymous ,
So how do I specify the list of users UPN to enable this MS Authenticator Apps on their mobile / cell phone?
Rajat Vashistha-MSFT 1,780 Reputation points Microsoft External Staff

2025-01-15T13:42:49.9533333+00:00

Hi EnterpriseArchitect,

Once you select "Enabled" to activate the registration campaign, you will see an option to select all users, as shown below:

If you need to exclude any user, you can add them as an exception, as shown below.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.
EnterpriseArchitect 6,301 Reputation points

2025-01-16T06:56:30.8533333+00:00

@Rajat Vashistha-MSFT ,
OK, how to perform bulk import of the users from the list ?
because selecting one by one to register is cumbersome.
Rajat Vashistha-MSFT 1,780 Reputation points Microsoft External Staff

2025-01-16T08:33:08.5866667+00:00

@EnterpriseArchitect, unfortunately, you cannot upload a list directly.

However, you can select the "All users" option, which will enable it for everyone by default. You won't need to select each user manually. If there are any exceptions, you will have to add them manually in the exclusion list.
EnterpriseArchitect 6,301 Reputation points

2025-01-17T00:05:50.7+00:00

Thank you @Rajat Vashistha

Share via

How can I perform bulk changes for the Microsoft Authenticator Apps registration?

0 additional answers

Your answer