enable phone sign in microsoft authenticator

Once you’re in the Office 365 MFA portal please hit the ‘ Users‘ tab and make sure that the accounts which you want to enable for password-less have a ‘ Multi-Factor Auth Status‘ of ‘ Disabled‘. You can find this Office 365 MFA portal if you go to the Azure portal, open the ‘ Azure Active Directory‘ blade, click on the ‘ Users‘ tab and from there hit ‘ Multi-Factor Authentication‘. But before we do that let’s verify first if the user accounts which you want to use for password-less are in a ‘disabled’ state within the Office 365 MFA portal. These days we can achieve this by using Conditional Access rules, these rules can be configured in (almost) any dynamic method that you prefer. The first step is to make sure that accounts are enabled with Azure Multi-Factor Authentication (MFA). Step 1: Prepare for Multi-Factor Authentication NOTE: For all of the next steps within this blog and the upcoming blogs an AD Premium P1 license must be used. Required technical steps for password-less phone sign-in The Microsoft Authenticator app is available for Android and iOS. Built on secure technology similar to what Windows Hello uses, this tool is packaged into a simple app on a mobile device making it a convenient option for users. Instead of using a password, users confirm their identity using their mobile phone through fingerprint scan, facial or iris recognition, or PIN. The app can also be used to verify multiple factors and replace the need for a password.

Microsoft Authenticator can be used to augment a password with a one-time passcode or push notification. The Microsoft Authenticator app enables users to verify their identity and authenticate to their work or personal account. A short introduction into password-less phone sign-in

This first blog out of 5 will describe how to enable password-less authentication via the phone sign-in option in Azure Active Directory. In my previous blog I’ve given you a full introduction to password-less, now let’s get into some more detail.

Enable phone sign in microsoft authenticator