MFA Verification Methods by application

Question

The MFA methods are set at the tenant level, we have an application where the vendor does not accept sms or call codes as secure enough and is insistent that an authenticator app must be used.

As we accept sms and calls for other applications is there a way this can be done at conditional access policy and not tenant level to enforce use of the authenticator app for this vendors group of applications?

Answer 1

Hi @Andy Hagan • Thank you for reaching out.

Unfortunately, Azure MFA does NOT include the capability of settings a specific Authentication Method for a particular application.

There is Authentication Method Policy but that can only be used to define users or groups that are enabled to use the Authenticator App authentication method and not the authentication method for applications.

I would suggest you post an idea regarding this at the User Voice portal, which is monitored by the product group for feature enhancements.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.