MFA for external users

Question

Hi,

In my organization we have enabled MFA with all available authentication methods (call to phone, text message, notification, verification code) and it works well for internal users.

But we collaborate with external users using Teams and now some of those users complain that system offers just Microsoft Authenticator as the only way of verification. 

How is this possible and how could I enable those additional methods for guest accounts?

Thank you.

Radim

Answer 1

Hi Radim,

Thanks for the update. You may try with a Conditional Access policy that requires MFA for access using Azure Active Directory (Azure AD) to see whether it can meet your requirement. MFA policies can be enforced at the tenant, app, or individual guest user level, the same way that they are enabled for members of your own organization. For your reference: Tutorial: Enforce multi-factor authentication for B2B guest users

If you have an any further question about Conditional Access policy using Azure Active Directory, then I would suggest you please post your question in dedicated Azure Active Directory Support forum for further assistance.

Your time and understanding will be highly appreciated.

Best regards,

Shyamal

Answer 2

Problem is that those users do not want to use Authenticator at all, that's the point of my question. For whatever reason they don't want to install anything on mobile device, just receive text messages. Therefore I need to give them those extra verification options. Any idea how to enable them?

Answer 3

Hi Radim,

Thank you for posting. They can install the Microsoft Authenticator app and add their personal or third-party accounts to the Microsoft Authenticator app to Turn on phone sign-in for their personal Microsoft accounts. For detailed information, see Sign in to your accounts using the Microsoft Authenticator app

Your time and understanding will be highly appreciated.

Best regards,

Shyamal