This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello,
I am trying to set up multi-factor authentication for our organization.
We do not have access to the MFA dashboard on Azure AD, as our license does not include this. Neither do we have access to Conditional Access policies.
What MFA methods are available to us?
Specifically, I would like to use either FIDO2 security keys (e.g. YubiKeys) or OATH (e.g. time-based one-time-passwords through an authenticator app). Is this possible?
Thanks,
Aksel
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 0%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVM%3C/text%3E%3C/svg%3E)
@Aksel Hjalmarsson Tórgarð FIDO 2 needs combined user experience to be enabled as pre-requisite which is a premium feature.
hardware OATH tokens also need either Azure AD P1 or P2. You would need to upgrade license in order to use them.
Thank you for clarifying.
What MFA methods are available, if we enable Security Defaults?
@Aksel Hjalmarsson Tórgarð Security default will work with Authenticator App only.
All users in your tenant must register for multi-factor authentication (MFA) in the form of the Azure AD Multi-Factor Authentication. A user's 14-day period begins after their first successful interactive sign-in after enabling security defaults.
Users have 14 days to register for Azure AD Multi-Factor Authentication by using the Microsoft Authenticator app.
After the 14 days have passed, the user won't be able to sign in until registration is completed.
Just to clarify, when you say Authenticator App only, what do you mean?
Is it any OATH app (e.g. Microsoft Authenticator, Google Authenticator, Yubico Authenticator), or is it Microsoft Authenticator only?
And if it is Microsoft Authenticator, what types of MFA are supported within it with Security Defaults?
@Aksel Hjalmarsson Tórgarð Microsoft Authenticator and it will support verification code from the app.
You should also be able to use any authenticator for OTP code generators.
Also, there is no licensing requirement to use the combined registration experience.