Forum Discussion

OneTechBeyond's avatar
OneTechBeyond
Iron Contributor
Jun 07, 2020

Difference between single "Approve" push MFA, and "match the number" push MFA in Microsoft 365?

How do I force enable Azure AD MFA on my Microsoft 365 tenants to use the "match the number on screen" push MFA via the Microsoft Authentor app, versus the older traditional single step "Please click...
Authentication
microsoft 365
redmantauk's avatar
redmantauk
Brass Contributor
Jun 08, 2020

Hi OneTechBeyond,

 

Are you referring to the capability of selecting 1 of 3 numbers at sign in?  If you are then this isn't MFA, this is password less sign in and allows users to select a number instead of entering a password. MFA is a an additional security measure after a password has been entered.  There are steps to implement password less sign in here https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-deployment

The mix of licences will have no affect on you deploying this.

  • OneTechBeyond's avatar
    OneTechBeyond
    Iron Contributor
    Jun 08, 2020

    redmantauk,

     

    Sorry yes I did mean Microsoft Authenticator Passwordless Sign In.

     

    The accounts in question are added properly in Azure AD's Security Preview section.  Does the user's Microsoft Authenticator app also have to be specifically set for "Passwordless Enabled" by the end user, or should that be automatically set when the user is added to Microsoft Authentication Passwordless signin, in Azure AD?