This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 31%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
Hello,
SMS-based authentication is one the options in Azure AD
Once you turn it on, all that user has to do is, put his registered mobile phone number and he will get the OTP on that phone.
My question is , how AAD does the home-realm-discovery ? How AAD finds the right tenant of the user ?
For eg., I can have 2 accounts and in 2 tenants and register the same mobile phone number enabled it for SMS-signin.
Thanks.
A cloud-based identity and access management service for securing user authentication and resource access
When you are prompted to enter the code, Azure already knows for which account and tenant you are trying to authenticate to. Once you enter it, then access is allowed
And that is my question.
I am hitting, https://mycustomapp.constoso.com
if this app is redirecting the user to /authorize to AAD on /common endpoint, and now user puts his phone number,
How did Azure AD find his home tenant ?
If user had put a proper UPN eg., ******@mytenant.com, AAD will redirect the user at mytenant.com,
Thanks.
Who made https://mycustomapp.constoso.com?
Its not going to simply send a SMS , it has to know who the user is somehow. The app is doing that right- it would have to.
How are you testing this? Does it work with an incognito browser?
Ok... I think, though you are not using MS terminologies, what you are trying to tell is app must be sending the request on a specific tenant-id and NOT on /common endpoint
I would suspect that this method of authentication requires a tenant specific endpoint.
I would think so as well :)