How to configure MFA to ask for 2 methods?

Question

How to configure MFA to ask for 2 methods?

Carlos Fernandes 1

Hi,

What options do I need to configure for MFA to ask new users to set up the Microsoft Authenticator app (alternatively any other app ) and an email address on the first login?
To be clear, I don't need 2 methods for SSPR, the App alone is fine but I want users to have the email method configured as an alternative in case they lose their phone.

It's a new tenancy so combined security is enabled, the Authenticator App method is configured for all users and conditional access is enabled and configured.

On the authentication methods I have 1 method required to reset, the "Mobile app notification" is greyed out (I assume because only 1 selected) + "Mobile app code" (in case they use another app + email. I may need to add phone because some people don't have smart phones.

Ideally, the App is the primary method and email secondary.

Thanks in advance,

Carlos

Stephen Damanskis 1 Reputation point

2022-02-04T15:28:36.917+00:00

I would like that answer too. For privacy reasons, I am never supplied with a cell phone number of new hires. Since I'm configuring email and can access it, that would be my question also.
Carlos Fernandes 1 Reputation point

2022-02-04T16:36:46.25+00:00

Hi Stephen. Not sure it's the same scenario what you are describing.

I just need users to set up the app and have their personal email address as an alternative in case the phone dies or something else. I need to enforce user to set up both methods but I only actually require 1 method for SSPR.

I've raised a ticket with support and will let you know if they can help with this configuration.

Cheers

Your answer

Stephen Damanskis 1 Reputation point

2022-02-04T15:28:36.917+00:00

I would like that answer too. For privacy reasons, I am never supplied with a cell phone number of new hires. Since I'm configuring email and can access it, that would be my question also.
Carlos Fernandes 1 Reputation point

2022-02-04T16:36:46.25+00:00

Hi Stephen. Not sure it's the same scenario what you are describing.

I just need users to set up the app and have their personal email address as an alternative in case the phone dies or something else. I need to enforce user to set up both methods but I only actually require 1 method for SSPR.

I've raised a ticket with support and will let you know if they can help with this configuration.

Cheers

Share via

How to configure MFA to ask for 2 methods?

Your answer