Forum Discussion
Solved
MFA with FIDO2 without mobile phone (no SMS or MS Authenticator)
Hello, I would like to use a FIDO2 key for authentication. I configured the authentication settings to use it. If the user already has an existing MFA (e.g. MS Authenticator), the FIDO2 key works v...
I have found the solution. It was an old setting. As soon as I deactivated the selected settings, I was no longer asked for additional information.
Hi, Stefan.
In addition to the settings Libby mentioned, you'll want to check the registration campaign settings, as they default to Microsoft-managed and occasionally get in the way of your planned behaviour since Microsoft has a tendency to re-run Authenticator-based campaigns from time to time.
- How to run a registration campaign to set up Microsoft Authenticator - Microsoft Entra ID | Microsoft Learn
- Microsoft Entra new feature and change announcements - Microsoft Community Hub (i.e. an example of Microsoft initiating a potentially unwanted campaign)
Cheers,
Lain