Question about authentication methods

Question

Question about authentication methods

Alberto Garcia 1

Hello,

I have a question about: Default Directory -> Security -> Authentication Methods -> Policies

I can see they are all defaulted to Enabled: No
I can use all the MFA options on my tenant (App notification / SMS) for both admins and regular users.

I do have the Default Directory -> Properties -> Manage security defaults -> Enable security defaults set to "Yes"

Does this second option cancel the default authentication methods selections?
Just trying to see if there is an option to restrict the methods and also to understand why the panel options are not really applied.

I am running some tests on my Azure free tenant.

Thank you.

1 answer

Your answer

Answer 1

Vasil Michev 123.6K MVP Volunteer Moderator

If you have Security defaults toggled on, there are certain implications as to authentication methods, detailed here: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults#deployment-considerations
Make sure to follow the advice in the article above and do not independently toggle auth methods on/off.

JamesTran-MSFT 37,226 Reputation points Microsoft Employee Moderator

2022-07-18T15:48:54.84+00:00

@Alberto Garcia
I just wanted to check in and see if you were able to resolve this issue? If you have any follow-up questions, can you share some screenshots of what you're referring to so we can gain a better understanding of your issue?

Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Alberto Garcia 1 Reputation point

2022-07-18T15:57:40.76+00:00

Hello,

I appreciate Michev answer, this is actually the document I have been checking for testing purposes.
I understand the recommendation from MS is not to change the authentication methods when using the security defaults.

What is suprising is that they are all off in my case, but they are really active as I have been able to use the `MFA/Authenticator app. Is like MS recommends not to turn any authentication method off when using security default, but it seems that they are not being considered at all

I guess my question is: Does MS disable the authentication methods selections when using the security default?

Including screenshot as requested,

Thank you.

Share via

Question about authentication methods

1 answer

Your answer