Blog Post

Microsoft Entra Blog
3 MIN READ

Combined MFA and password reset registration is now generally available

Alex_Simons's avatar
Alex_Simons
Icon for Microsoft rankMicrosoft
Apr 16, 2020
Howdy folks,   Today we’re announcing that the combined security information registration is now generally available. This new experience makes it easy for users to register for Multi-Factor Auth...
Updated Jul 24, 2020
Version 7.0
Alex_Simons's avatar
Icon for Microsoft rankMicrosoft
Joined May 01, 2017
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
DTunes's avatar
DTunes
Copper Contributor
Apr 23, 2020

Hi,

I have a couple of questions regarding Registration Enforcement in the combined mode, based on information on this page https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

  1.  After you enabled combined registration, users need to register or confirm their phone number or mobile app through the new experience to use them for both MFA and SSPR. Is it so that the already registered methods in MFA or SSPR will not work for both if they do not re-register or re-confirm their authentication methods through the new experience?
  2. If we enforce registration through SSPR settings, is it correct that the registered authentication methods will only be valid for SSPR and not MFA?
  3. We want to take advantage of the SSPR feature to have users re-confirm their authentication methods after X number of days, but if we have enforce registration through MFA's identity protection settings or Conditional Access, then does that mean we cannot utilize the SSPR re-confirmation feature for both?

Thanks.