Forum Discussion
Solved
Managing Multiple M365 Administrator Accounts with Microsoft Authenticator Backup
Hello Tech Community, I am looking for some advice on how to efficiently manage and back up multiple M365 Administrator accounts using the Microsoft Authenticator app. As an IT Support profession...
I like that Microsoft Authenticator MFA cannot be restored. Allowing this would weaken security. Yes this means I must redo the non-M365 Authenticator IDs when getting another iPhone. Protocol requires one to have a minimum of two admin IDs in a M365 account, thus another admin can setup a TAP (temporary access password) to have a user reset their Microsoft Authenticator ID.
That's by design sadly, so you either have to have the "old" phone in the other hand, or use other methods. FIDO2 keys seems to be the industry standard nowadays.
How do you use FIDO2 Keys to support MFA for multiple Global Administrator Accounts for different Tenants? I don't see that as an option when I set up MFA in M365.