MFA

Azure AD – Authenticator number matching will be enabled for all users

  As you know, Azure AD allows you to request multi-factor authentication (MFA) using the Azure AD MFA and Microsoft Authenticator application.   Since its introduction Azure AD MFA has been continuously improved.   Latest improvement was to request a number matching during the MFA process to avoid accidental approval and fight against MFA fatigue …

Azure AD – Authenticator number matching will be enabled for all users Read More »

Azure MFA – The Azure MFA Server will be deprecated on September 30, 2024

  For years, Microsoft has been providing a multi-factor authentication server – initially called Phone Factor and since then renamed as Azure MFA Server – to help protecting on-premises workloads.   Over time, Azure AD MFA has been improved while it was getting easier to use Azure AD MFA to protect on-premises workloads – for …

Azure MFA – The Azure MFA Server will be deprecated on September 30, 2024 Read More »

Azure AD – You can now define the multifactor authentication strength (preview)

Azure AD comes with a lot of security features – some recent such as Passwordless authentication, some less recent such as conditional access – helping protecting your identities and workloads access. Well, in the never ending journey to keep secure identities and data, the Conditional Access feature has been updated to allow administrators to request …

Azure AD – You can now define the multifactor authentication strength (preview) Read More »

Azure AD – New security features are now available for Azure MFA

As you know, you can secure access to your resources using Azure AD MFA and the Microsoft Authenticator application. Over the time, Azure AD MFA has been evolving to provide more features such as different authentication methods (like FIDO keys) or helping to start the password-less journey. Well, there have been several new features being …

Azure AD – New security features are now available for Azure MFA Read More »

Azure AD – New administration roles for managing domain name and authentication methods

Good news, you don’t need to be a global administrator to manage Multi Factor Authentication (MFA) or authentication methods. A new role called Authentication Policy Admin allows you to delegate authentication methods management, covering MFA or password protection policies. NOTE the legacy MFA setting is not available for the authentication policy admin role Below is …

Azure AD – New administration roles for managing domain name and authentication methods Read More »

Security – The Authenticator Application now provides a full screen experience and allow to manage the ‘display code’ for all account at once

By now you should already know the Microsoft Authenticator application used for multi-factor authentication (MFA) when accessing Microsoft services (Microsoft Accounts, Office 365, Azure….) but also other services like Facebook, Google or LinkedIn. Well, the Authenticator application has been updated to provide 2 new nice features: Display/Hide codes for accounts using code only for MFA …

Security – The Authenticator Application now provides a full screen experience and allow to manage the ‘display code’ for all account at once Read More »

Azure – Azure MFA will now be enabled by default and free

As just announced at the Microsoft Ignite 2019 Conference, Azure Multi Factor Authentication (Azure MFA) will now be enabled by default for all new Azure AD (and Office 365 or Dynamics as they rely on Azure AD) tenant and will be also free for existing customers with the Microsoft Authenticator app (available on Android https://play.google.com/store/apps/details?id=com.azure.authenticator …

Azure – Azure MFA will now be enabled by default and free Read More »

Security – You can now backup your Microsoft Authenticator application

It has been a long awaited feature for the Microsoft Authenticator application: being able to backup your multi factor accounts and recover them. Well, the wait is now over as you can now backup your MFA accounts and off course recover them when reusing the same account. It works for both personal and work profiles …

Security – You can now backup your Microsoft Authenticator application Read More »

Azure – Azure MFA Server is going to be retired

As you may know Azure Multi Factor Authentication is (or was as per the below) also available for on-premises deployment (known as Azure MFA Server) to protect your on-premises systems (like remote desktop, VPN, web server or Exchange). Well, on July 1st 2019, Azure MFA will be no longer available for new deployment; existing deployment …

Azure – Azure MFA Server is going to be retired Read More »

Azure AD – You can now secure SSPR and MFA registration using conditional access

You may already know this is a best practice to get your users registered for Azure Multi Factor Authentication (MFA) and Self Service Password Reset (SSPR). That said, the registration requires your end-user to provide sensitive information (phone number, external email address…) to help the system to properly identify them during the registration process – …

Azure AD – You can now secure SSPR and MFA registration using conditional access Read More »