%3CLINGO-SUB%20id%3D%22lingo-sub-388947%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-388947%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F42443%22%20target%3D%22_blank%22%3E%40Mark%20Corneglio%3C%2FA%3E%26nbsp%3Bnot%20yet%2C%20but%20we're%20working%20on%20it!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-388931%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-388931%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20way%20to%20control%20first%20time%20MFA%20registration%20with%20conditional%20access%20with%20this%20new%20functionality%3F%26nbsp%3B%20Specifically%2C%20we'd%20like%20to%20limit%20MFA%20first%20time%20signup%20to%20only%20users%20on%20Trusted%20Networks.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376458%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376458%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BWe%20enabled%20this%20combined%20SSPR%20signup%20for%20all%20users%20and%20have%20the%20Password%20Reset%20functionality%20limited%20to%20a%20user%20group%20to%20limit%20the%20audience%20and%20so%20far%20works%20quite%20well.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20run%20into%20the%20same%20issue%20as%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F746%22%20target%3D%22_blank%22%3E%40Petr%20Vlk%3C%2FA%3E%26nbsp%3Bwith%20the%20%E2%80%98An%20unexpected%20error%20has%20occurred%E2%80%99%20page%20being%20displayed%20to%20any%20user%20using%20IE11%20with%20protected%20mode%20in%20IE%20disabled%20(someone%20decided%20that%20we%20should%20trust%20*.microsoft.com%20instead%20of%20just%20specific%20sub-sites...).%20Enabling%20protected%20mode%20on%20trusted%20sites%20(for%20testing)%20or%20removing%20microsoft.com%20from%20the%20trusted%20sites%20list%20resolved%20the%20issue.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F93597iC50EF9EB849F7D9B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image001.png%22%20title%3D%22image001.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20should%20mention%20that%20it%20does%20work%20well%20on%20Chrome%2C%20Firefox%2C%20Edge%20or%20IE%20in%20Private%20mode%20though.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376311%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376311%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F301174%22%20target%3D%22_blank%22%3E%40Andy-H%3C%2FA%3E%26nbsp%3Bok%20please%20shoot%20me%20a%20DM%20and%20we'll%20look%20into%20it.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376310%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376310%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BWe%20don't%20have%20SSPR%20enabled.%26nbsp%3B%20And%20don't%20have%20notifications%20enabled%20elsewhere.%26nbsp%3B%20Just%20the%20verification%20code.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376309%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376309%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F301174%22%20target%3D%22_blank%22%3E%40Andy-H%3C%2FA%3E%26nbsp%3Bdo%20you%20have%20notifications%20enabled%20anywhere%20else%3F%20For%20SSPR%3F%20If%20not%2C%20then%20they%20shouldn't%20be%20able%20to%20register%20with%20notification.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376308%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376308%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3EThanks%20Sadie.%26nbsp%3B%20Was%20bit%20alarmed%20at%20first%2C%20as%20we%20explicitly%20chose%20just%20'%3CSPAN%20class%3D%22PropertySheet%22%3EVerification%20code%20from%20mobile%20app%20or%20hardware%20token.%3C%2FSPAN%3E'%26nbsp%3B%20And%20this%20behavior%20differed%20from%20the%20original%2Fcurrent%20experience.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376307%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376307%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F6201%22%20target%3D%22_blank%22%3E%40Jonas%20Back%3C%2FA%3E%26nbsp%3BYou%20can%20direct%20users%20to%20any%20of%20those%20areas%20and%20they%20will%20be%20redirected%20if%20needed.%20They%20can%20also%20go%20directly%20to%20aka.ms%2Fmysecurityinfo.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks!%3C%2FP%3E%0A%3CP%3ESadie%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376305%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376305%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F301174%22%20target%3D%22_blank%22%3E%40Andy-H%3C%2FA%3E%26nbsp%3Bwhen%20the%20user%20registers%20with%20notification%2C%20they%20also%20register%20for%20code.%20We%20streamlined%20the%20experience%20(based%20on%20feedback%20and%20usability%20testing)%20to%20register%20via%20notification%20since%20it's%20the%20easiest%20option.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33650%22%20target%3D%22_blank%22%3E%40Matthew%20Adkins%3C%2FA%3E%26nbsp%3Bcan%20you%20shoot%20me%20a%20direct%20message%3F%20I'd%20like%20to%20get%20a%20trace%20of%20the%20issue%20if%20possible.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F233448%22%20target%3D%22_blank%22%3E%40niels%20haaijer%3C%2FA%3E%26nbsp%3Bthanks%20for%20letting%20me%20know!%20We'll%20fix%20this%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-376155%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-376155%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20enabled%20the%20new%20public%20preview%20(the%20refresh)%20for%20All%20users%20now%20instead%20of%20just%20a%20group%20and%20are%20producing%20Quickstart%2Fstep-by-step%20instructions%20for%20our%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B1.%20is%20the%20plan%20to%20keep%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsetupsecurityinfo%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Fsetupsecurityinfo%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eor%20should%20we%20rather%20direct%20all%20users%20to%20%3CA%20href%3D%22https%3A%2F%2Fmyprofile.microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmyprofile.microsoft.com%3C%2FA%3E%20and%20then%20clicking%26nbsp%3B%3CSTRONG%3ESecurity%20info%3C%2FSTRONG%3E%3F%202.%20Is%20the%20plan%20to%20change%20so%20that%20clicking%20your%20profile%20picture%2Favatar%20in%20the%20top%20right%20%26gt%3B%20My%20account%20will%20get%20you%20to%20this%20new%20portal%20as%20well%20once%20we%20go%20GA%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20so%20we%20get%20our%20instructions%20correct%20now%20and%20also%20change%20them%20once%20it%20goes%20GA.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-370087%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-370087%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B%20Thanks%20for%20this%20great%20improvement%2C%20we%20have%20just%20one%20little%20side%20note.%3C%2FP%3E%3CP%3EThe%20localized%20experience%20NL%20%2F%20Dutch%20for%20us%2C%20still%20gives%20us%20one%20line%20of%20text%20in%20English%20(see%20screenshot).%26nbsp%3B%3C%2FP%3E%3CP%3EHopefully%20you%20can%20fix%20that%2C%20thanks%20in%20advanced.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20823px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F89294iE0805F1E8E7E47A4%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22SSPR_NL_VS_ENG.png%22%20title%3D%22SSPR_NL_VS_ENG.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-370036%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-370036%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BWhen%20we%20turned%20this%20feature%20on%20for%20a%20larger%20group%2C%20we%20had%20multiple%20reports%20of%20%22An%20unexpected%20error%20has%20occurred%22%20which%20prevented%20individuals%20from%20viewing%20or%20adding%20registration%20methods.%20%26nbsp%3BWe%20have%20now%20limited%20the%20feature%20to%20just%20a%20handful%20of%20users%20and%20can%20reproduce%20the%20error%20whenever%20we%20use%20the%20Safari%20browser.%20%26nbsp%3B%20Any%20suggestions%3F%20%26nbsp%3B%20Should%20we%20just%20wait%20it%20out%20a%20bit%20more%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369744%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369744%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BWith%20the%20current%20approach%2C%20we%20were%20able%20to%20have%20the%20users%20leverage%20ONLY%20the%20Authenticator%20challenge%20codes%2C%20no%20app%20notifications.%26nbsp%3B%20Now%2C%20it%20looks%20like%20the%20new%20preview%20forces%20the%20user%20to%20use%20App%20notifications%20instead%20of%20the%20OTP%20challenge%20code%3F%26nbsp%3B%20Unless%20they%20change%20it%20to%20use%20a%20different%20authenticator%20app%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365093%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365093%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F298417%22%20target%3D%22_blank%22%3E%40ITPro44%3C%2FA%3E%26nbsp%3Bcan%20you%20send%20me%20a%20direct%20message%20with%20more%20details%3F%20we'll%20look%20into%20this%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-365028%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-365028%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%2C%3C%2FP%3E%3CP%3Ejust%20yesterday%20I%20went%20and%20enabled%20this%20new%20experience.%26nbsp%3B%20It%20worked%20great%20for%20the%20first%20user%20I%20tested.%26nbsp%3B%20Now%20today%2C%20it's%20stopped%20working%20for%20every%20other%20user%20we%20test.%26nbsp%3B%20Instead%20of%20getting%20the%20screen%20that%20is%20shown%20in%20the%20first%20picture%20in%20this%20post%2C%20we%20now%20get%20the%20following%20screen.%26nbsp%3B%20I%20have%20also%20included%20a%20picture%20of%20how%20the%20settings%20are%20configured%20in%20Azure%20AD%20(note%20I've%20tried%20both%20settings%20and%20neither%20produce%20the%20correct%20result).%26nbsp%3B%20I'd%20appreciate%20any%20help%20you%20can%20give%20us%20as%20we%20are%20looking%20to%20roll%20this%20out%20to%20about%20100%20of%20our%20users%20as%20soon%20as%20this%20is%20resolved.%26nbsp%3B%20Thanks!%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F86594i36765EB4744EA0BA%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22MFA%20Error.png%22%20title%3D%22MFA%20Error.png%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20827px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F86595i25BE86B1572C4003%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfa%20settings.png%22%20title%3D%22mfa%20settings.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364998%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364998%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F82527%22%20target%3D%22_blank%22%3E%40peter%20horrigan%3C%2FA%3E%26nbsp%3BI'm%20not%20sure%20on%20bringing%20MFA%20capabilities%20to%20GCC%20high%20but%20I%20will%20look%20into%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F291128%22%20target%3D%22_blank%22%3E%40neale360%3C%2FA%3E%26nbsp%3Bcan%20you%20send%20me%20a%20direct%20message%20with%20more%20details%3F%20It%20would%20be%20great%20to%20understand%20what%20your%20MFA%20and%20SSPR%20policies%20are.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3Byes%20-%20SQSA%20is%20part%20of%20the%20new%20experience%20and%20is%20enabled%20through%20SSPR.%20However%2C%20if%20you're%20testing%20with%20an%20admin%20account%2C%20you%20won't%20have%20access%20to%20SQSA%20since%20they're%20not%20available%20for%20admins.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364982%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364982%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B-%20is%20the%20questions%20and%20answers%20for%20password%20reset%20coming%20to%20this%20new%20experience%2C%20or%20should%20that%20be%20turned%20on%20under%20the%20self%20service%20password%20reset%20options%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-364212%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364212%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20experiencing%20several%20users%20that%20are%20being%20prompted%20to%20%22provide%20additional%20information%22%20who%20already%20had%20setup%20their%20MFA%20via%20this%20same%20link%20less%20than%202%20weeks%20ago.%26nbsp%3B%20What's%20going%20on%20that%20they%20are%20need%20to%20go%20thru%20the%20setup%20again%3F%26nbsp%3B%20Most%20had%20opted%20for%20the%20authenticator%20app%20the%20first%20time%20around%2C%20and%20even%20though%20they%20still%20have%20it%20active%2C%20it%20will%20not%20accept%20the%20%22Approve%22%20link.%20They%20are%20having%20to%20select%20the%20phone%20option%20(calls%20and%20enter%20%23)%2C%20but%20I%20just%20had%20one%20this%20morning%20that%20had%20configured%20the%20call%20with%20%23.%20They%20were%20forced%20to%20setup%20up%20the%20same%20method%20again%20(call%20%23).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20advise...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-363621%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-363621%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20plan%20in%20the%20future%20to%20include%20any%20MFA%20feature%20parody%20in%20GCC%20high%3F%26nbsp%3B%20We%20leverage%20two%20environments%20at%20my%20company%2C%20and%20these%20feature%20would%20be%20great%20for%20our%20GCC%20high%20setup%20which%20it%20looks%20like%20isn't%20supported%20for%20MFA.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-363438%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-363438%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Brian%20-%20yes%2C%20we%20will%20be%20adding%20the%20ability%20to%20navigate%20through%20the%20experience%20with%20tab%2Fenter.%20We%20are%20also%20adding%20country%20names%20to%20the%20country%20code%20drop%20down%20to%20help%20with%20easier%20navigation.%20We%20don't%20have%20plans%20to%20default%20to%20a%20code%20based%20on%20your%20locale%2C%20but%20I%20will%20look%20into%20this.%20Thanks%20for%20your%20feedback!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-363414%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-363414%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B-%20any%20chance%20of%20adding%20the%20ability%20to%20press%20Enter%20on%20the%20keyboard%20and%20have%20this%20move%20onto%20the%20next%20step%20-%20the%20current%20experience%20of%20the%20refreshed%20refresh!%20is%20that%20you%20need%20to%20click%20Next%20to%20move%20on.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESame%20for%20the%20telephone%20number%20STD%20codes%20-%20you%20have%20to%20use%20a%20mouse%2C%20you%20cannot%20just%20type%20and%20have%20the%20correct%20value%20selected%20-%20for%20example%2C%20UK%2C%20%2B44%2C%20I%20need%20to%20scroll%20down%20(even%20though%20the%20user%20I%20am%20logged%20in%20with%20is%20%22region%20GB%20in%20Azure%20AD%22%20it%20defaults%20to%20%2B1%20for%20USA%20for%20the%20STD%20phone%20code%20and%20I%20cannot%20just%20type%20%2B44%20(ideally%2C%20default%20to%20the%20STD%20code%20region%20for%20the%20user%20please).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBrian%20Reid%20(MVP)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-363413%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-363413%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B-%20any%20chance%20of%20adding%20the%20ability%20to%20press%20Enter%20on%20the%20keyboard%20and%20have%20this%20move%20onto%20the%20next%20step%20-%20the%20current%20experience%20of%20the%20refreshed%20refresh!%20is%20that%20you%20need%20to%20click%20Next%20to%20move%20on.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESame%20for%20the%20telephone%20number%20STD%20codes%20-%20you%20have%20to%20use%20a%20mouse%2C%20you%20cannot%20just%20type%20and%20have%20the%20correct%20value%20selected%20-%20for%20example%2C%20UK%2C%20%2B44%2C%20I%20need%20to%20scroll%20down%20(even%20though%20the%20user%20I%20am%20logged%20in%20with%20is%20%22region%20GB%20in%20Azure%20AD%22%20it%20defaults%20to%20%2B1%20for%20USA%20for%20the%20STD%20phone%20code%20and%20I%20cannot%20just%20type%20%2B44%20(ideally%2C%20default%20to%20the%20STD%20code%20region%20for%20the%20user%20please)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-363097%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-363097%22%20slang%3D%22en-US%22%3E%3CP%3EBen%20-%20that%20option%20is%20shown%20if%20Mobile%20app%20code%20is%20enabled%20since%20you%20can%20register%20any%20OATH-capable%20authenticator%20app%20using%20the%20QR%20code.%20However%2C%20I'll%20look%20into%20the%20possibility%20of%20removing%20that%20link.%20Thank%20you%20for%20the%20feedback!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-362852%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-362852%22%20slang%3D%22en-US%22%3E%3CP%3EWill%20it%20be%20possible%20to%20turn%20off%20the%20%22I%20want%20to%20use%20a%20different%20authenticator%20app%22%20option%20displayed%20on%20the%20%22Keep%20your%20account%20secure%22%20screen%3F%20A%20couple%20of%20clients%20have%20asked%20me%20about%20this%20because%20they'd%20like%20to%20drive%20adoption%20of%20the%20Microsoft%20Authenticator%20app.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-361269%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-361269%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Geir%20-%20the%20pages%20are%20localized%20but%20we%20respect%20localization%20settings%20in%20the%20browser%20in%20a%20specific%20order.%20Can%20you%20send%20me%20a%20direct%20message%20and%20we%20can%20look%20into%20what's%20going%20on%20with%20your%20users%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-359827%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-359827%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20find%20the%20new%20onboarding%20process%20a%20big%20improvement.%20I%20see%20others%20have%20reported%20that%20localized%20version%20is%20not%20avaliable%2C%20and%20can%20confirm%20that%20English%20UI%20is%20displayed%20on%20Norwegian%20language%20set%20Browsers.%20We%20are%20onboarding%20a%20lot%20of%20new%20users%20the%20next%20weeks%20and%20would%20like%20to%20use%20the%20new%20experience%2C%20but%20have%20to%20opt%20out%20due%20to%20missing%20localized%20version.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20will%20localized%20versions%20be%20available%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EGeir%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358354%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358354%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226024%22%20target%3D%22_blank%22%3E%40Lennard%20Kuijten%3C%2FA%3E%26nbsp%3B%20glad%20to%20hear%20it!%20We%20will%20look%20into%20the%20browser%20kiosk%20issue%20right%20away.%20Thanks%20for%20alerting%20us!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-358157%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-358157%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EGreat%20upgrade!%20Far%20more%20user%20friendly.%3CBR%20%2F%3EOnly%201%20little%20bug%3A%3CBR%20%2F%3EWhen%20an%20user%20opens%20an%20Office%20App%20(Outlook)%20and%20need%20to%20register%20for%20MFA%20and%20SSPR%20in%20the%20new%20registration%20Experience.%20The%20browser%20kiosk%20window%20is%20square%2C%20but%20the%20wizard%20is%20rectangular.%26nbsp%3B%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3EBecause%20if%20this%2C%20the%20Next%20buttons%20aren't%20visible%20without%20scrolling%20to%20the%20right%20site%20or%20manually%20make%20the%20window%20bigger.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357914%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357914%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F117000%22%20target%3D%22_blank%22%3E%40Ben%20Athawes%3C%2FA%3E%2C%26nbsp%3Bthat's%20great%20to%20hear!%20I'm%20glad%20customers%20are%20liking%20the%20new%20experience.%20I%20don't%20have%20a%20GA%20date%20that%20I%20can%20share%20at%20this%20point%20but%20feel%20free%20to%20reach%20out%20to%20me%20directly%20and%20we%20can%20discuss%20further.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357871%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357871%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20stuff%2C%20I've%20had%20some%20positive%20comments%20from%20customers%20that%20had%20been%20testing%20out%20preview%20%231%20of%20this%20capability.%26nbsp%3BIt's%20also%20great%20to%20see%20a%20preview%20of%20using%20the%20%3CSPAN%3EMicrosoft%20Authenticator%20app%20as%20an%20auth%20method%20for%20SSPR%20given%20how%20popular%20that%20method%20is%20for%20MFA.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAs%20is%20often%20the%20case%20with%20previews%2C%20however%2C%20I'm%20finding%20that%20some%20customers%20are%20now%20holding%20off%20on%20deploying%20SSPR%20as%20this%20new%20experience%20may%20be%20just%20around%20the%20corner%20-%20do%20we%20have%20an%20ETA%20on%20GA%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357077%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357077%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F291128%22%20target%3D%22_blank%22%3E%40neale360%3C%2FA%3E%2F%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F738%22%20target%3D%22_blank%22%3E%40Petr%20Vlk%3C%2FA%3E%2F%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F154872%22%20target%3D%22_blank%22%3E%40Markus%20Strickler%3C%2FA%3E%26nbsp%3B-%20thanks%20for%20alerting%20us%20to%20this.%20We%20are%20looking%20into%20these%20issues%20now.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356926%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356926%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20opening%20aka.ms%2Fsetupsecurityinfo%20directly%20from%20a%20Mobile%20Safari%20(iOS%2012.1.4)%2C%20the%20session%20times%20out%20after%20%2B%2F-%2010%20seconds.%20(Your%20session%20has%20timed%20out).%20Clicking%20'Sign%20in'%20on%20that%20timeout%20message%20doesn't%20take%20me%20back%20in%2C%20but%20shows%20the%20'Oops%2C%20it%20looks%20like%20your%20Administrator%20hasn't%20enabled%26nbsp%3Bthis%20experience%20for%20you...'%20warning%20bar%2C%20then%20takes%20me%20to%20the%20old%20experience%20-%20even%20if%20I%20was%20on%20the%20new%20experience%20just%20seconds%20ago%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356523%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356523%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F291128%22%20target%3D%22_blank%22%3E%40neale360%3C%2FA%3E%3A%20Hi%2C%20this%20user%20is%20using%20Google%20Chrome%20as%20primary%2C%20but%20we%20also%20instruct%20to%20try%20Edge%20without%20success.%20We%20tried%20with%20adding%20sites%20as%20Trusted%20as%20recommended%20by%20Microsoft.%20But%20little%20bit%20unfortunate%2C%20that%20this%20should%20be%20easily%20available%20not%20only%20to%20COPE%2FCOSU%20but%20also%20to%20BYOD%20devices%20which%20does%20not%20have%20such%20settings%20or%20using%20third%20party%20browsers%20sometimes.%20We%20sometimes%20hear%20that%20also%20Conditional%20Access%20policies%20working%20only%20for%20some%20browsers%2C%20but%20this%20is%20different%20story.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-356483%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356483%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F746%22%20target%3D%22_blank%22%3E%40Petr%20Vlk%3C%2FA%3E%26nbsp%3Bwe%20had%20a%20user%20the%20received%20the%20%22oops....%22%20message.%20He%20was%20using%20firefox.%20I%20have%20him%20open%20the%20link%20in%20Edge%20(which%20also%20required%20him%20to%20enter%20his%20credentials%20vs%20cached)%20and%20it%20worked%20as%20expected.%20HTH%2C%20Neale%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355635%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355635%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F107597%22%20target%3D%22_blank%22%3E%40Pete%20Snell%3C%2FA%3E%26nbsp%3Bthey're%20not%20available%20today%20but%20we%20are%20working%20on%20it.%20And%20yes%2C%20requiring%20two%20methods%20for%20SSPR%20is%20a%20great%20way%20to%20do%20this!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355563%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355563%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20quick%20reply.%20Are%20the%20controls%20that%20would%20allow%20me%20to%20require%20a%20phone%20number%20in%20addition%20to%20the%20Authenticator%20app%20during%20enrollment%20available%20today%2C%20or%20is%20this%20on%20the%20road%20map%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20somewhat%20require%20more%20then%20one%20method%20during%20enrollment%20by%20playing%20with%20the%20SSPR%20methods%2C%20but%20doing%20this%20would%20make%20users%20have%20to%20use%20two%20methods%20for%20resetting%20a%20password%20(which%20often%20times%20would%20be%20the%20same%20device%20if%20talking%20about%20Authenticator%20app%20and%20sms)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355550%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355550%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F107597%22%20target%3D%22_blank%22%3E%40Pete%20Snell%3C%2FA%3E%26nbsp%3Bgreat%20question!%20We've%20moved%20away%20from%20the%20backup%20phone%20number%2C%20but%20we're%20working%20on%20giving%20admins%20more%20control%20around%20which%20methods%20a%20user%20is%20required%20to%20register%20and%20how%20many.%20Those%20controls%20will%20allow%20you%20to%20require%20a%20phone%20number%20in%20addition%20to%20the%20Microsoft%20Authenticator%20app.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355544%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355544%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20been%20testing%20the%20enrollment%20of%20MFA%20and%20SSPR%20and%20ran%20into%20an%20issue%20we%20were%20hoping%20you%20could%20help%20with.%3C%2FP%3E%3CP%3EWhen%20using%20the%20preview%20of%20the%20converged%20MFA%2FSSPR%20enrollment%20(and%20now%20%22%3CSPAN%3Eenhanced%20security%20info%20registration%20experience%22%3C%2FSPAN%3E)%20during%20setup%20we%20noticed%20if%20you%20select%20to%20use%20the%20Authenticator%20app%20you%20are%20never%20required%20to%20add%20an%20alternate%20SMS%20number%20to%20be%20used%20in%20the%20event%20you%20lost%20the%20authenticator%20app.%20(The%20process%20exists%20in%20the%20current%20%E2%80%9Cnon-converged%E2%80%9D%20release%20and%20can%20be%20seen%20during%20the%20enrollment%20of%20MFA)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EAny%20plans%20to%20add%20the%20backup%20%E2%80%9CRecovery%E2%80%9D%20method%20during%20enrollment%20of%20the%20authenticator%20app%3F%3C%2FLI%3E%3CLI%3EIs%20there%20a%20plan%20to%20allow%20users%20to%20enroll%20in%20more%20than%20one%20MFA%20option%20during%20time%20of%20enrollment%3F%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355513%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355513%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F746%22%20target%3D%22_blank%22%3E%40Petr%20Vlk%3C%2FA%3E%26nbsp%3Bit%20sounds%20like%20you%20may%20have%20found%20a%20bug.%20Can%20you%20send%20me%20a%20direct%20message%20with%20more%20details%20and%20my%20team%20and%20I%20will%20look%20into%20it%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20also%20understand%20and%20agree%20with%20your%20concerns%20around%20confusion%20with%20profile%2Faccount%20pages.%20We're%20working%20on%20making%20this%20more%20simple%20for%20users%20-%20keep%20an%20eye%20out%20for%20future%20improvements!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355510%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355510%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F6812%22%20target%3D%22_blank%22%3E%40Ben%20Watt%3C%2FA%3E%26nbsp%3Bit%20sounds%20like%20you%20may%20have%20found%20a%20bug.%20I%20will%20look%20into%20this%20with%20my%20team%20right%20away%20and%20reach%20out%20if%20we%20need%20more%20details.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355508%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355508%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F154872%22%20target%3D%22_blank%22%3E%40Markus%20Strickler%3C%2FA%3E%26nbsp%3BOffice%20phone%20can%20be%20used%20for%20MFA%20if%20you%20have%20phone%20call%20enabled%20as%20an%20MFA%20method.%20Feel%20free%20to%20shoot%20me%20a%20message%20and%20I'm%20happy%20to%20dig%20into%20this%20further%20with%20you.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355506%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355506%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33025%22%20target%3D%22_blank%22%3E%40Chris%20Yue%3C%2FA%3E%26nbsp%3Bno%2C%20there%20aren't%20any%20dependencies%20on%20an%20O365%20version.%20The%20licensing%20requirements%20are%20not%20around%20registration%20but%20the%20features%20themselves.%20MFA%20and%20SSPR%20have%20specific%20licensing%20requirements%20and%20if%20you%20meet%20those%2C%20your%20users%20can%20register%20security%20information.%20Feel%20free%20to%20shoot%20me%20a%20direct%20message%20if%20you'd%20like%20to%20discuss%20further.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355504%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355504%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F289321%22%20target%3D%22_blank%22%3E%40ChristianMueller%3C%2FA%3E%26nbsp%3Bthe%20experience%20should%20localize%20depending%20on%20your%20browser%20locale.%20If%20that's%20not%20the%20case%20for%20you%2C%20please%20send%20me%20a%20direct%20message%20and%20we'll%20look%20into%20it.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355503%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355503%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F278185%22%20target%3D%22_blank%22%3E%40TakuyaHirose%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EAre%20you%20asking%20when%20this%20will%20no%20longer%20be%20opt-in%20and%20be%20the%20default%20experience%20for%20all%20tenants%3F%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3EYes%2C%20this%20is%20an%20opt-in%20experience%20right%20now%2C%20so%20you%20only%20need%20to%20use%20it%20if%20you%20choose%20to%20enable%20it.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EFeel%20free%20to%20shoot%20me%20a%20direct%20message%20and%20we%20can%20discuss%20further.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355501%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355501%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20what%20to%20do%20when%20a%20particle%20user%20receives%20the%20message%26nbsp%3B%22Oops%2C%20it%20looks%20like%20your%20administrator%20hasn't%20enabled%20this%20experience%20for%20you.%20Please%20chose%20%22Continue%22%20to%20view%20your%20profile.%22.%20Because%20we%20enable%20both%20experiences%20for%20%22All%22%20users%20in%20the%20tenant%3F%20Also%2C%20when%20user%20click%20%22Continue%22%20he%20has%20redirected%20to%20AAD%20My%20Profile%20page%20and%20from%20there%20back%20to%20this.%20And%20he%20cannot%20access%2C%20change%20the%20registered%20methods%20even%20in%20old%20experience%2C%20because%20it%20redirects%20him%20to%20the%20new%20one.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%2C%20one%20feedback%20maybe%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F53477%22%20target%3D%22_blank%22%3E%40Alex%20Simons%20(AZURE)%3C%2FA%3E.%20You%20should%20talk%20with%20the%20Office%20365%20team%20and%20make%20a%20single%20wording%20for%20each%20%22profile%22%20and%20%22account%22%20links.%20Because%20once%20account%20take%20you%20to%20Delve%2C%20profile%20to%20AAD%20page%2C%20account%20once%20to%20Office%20365%20setup%2C%20profile%20to%20different%20AAD%20page.%20Really%20confusing%20for%20users.%20But%20definitely%20great%20progress%20to%20a%20better%20experience%20with%20MFA%2FSSPR%20with%20these%20efforts.%20I%20hope%20to%20soon%20try%20FIDO2%20natively%20in%20AAD%20and%20Windows%2010.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPS%3A%20When%20the%20admin%20reset%20MFA%20for%20user%20and%20user%20go%20to%20portal%2C%20it%20fail%20completely.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20546px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F84104iCD29985479582955%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Error_SSPR_MFA.png%22%20title%3D%22Error_SSPR_MFA.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355362%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355362%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20improvement%2C%20much%20clearer%2C%20and%20I%20do%20like%20the%20emphasis%20on%20the%20Authenticator%20app%20here.%20I%20noticed%20though%20whilst%20playing%20with%20a%20test%20account%20that%20if%20I%20chose%20to%20not%20use%20Authenticator%2C%20and%20used%20say%20SMS%20and%20email%20verification%2C%20when%20I%20next%20login%20it%20gives%20an%20error%20and%20presents%20a%20list%20of%20all%20options%20to%20choose%20from%20to%20verify%20login%2C%20even%20though%20some%20are%20not%20relevant%20(ie%20authenticator).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20then%20get%20in%20with%20SMS%20for%20example%2C%20but%20the%20option%20to%20set%20a%20default%20authentication%20method%20is%20not%20available%20when%20I%20look%20at%20%22Security%20Info%22.%20If%20I%20add%20the%20Authenticator%20app%2C%20the%20default%20option%20turns%20up%2C%20with%20Authenticator%20as%20the%20default%2C%20which%20I%20can%20then%20change%20if%20I%20wanted%20to.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355297%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355297%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone%3C%2FP%3E%3CP%3EWe%20were%20looking%20to%20include%20%2F%20allow%20the%20office%20phone%2C%20as%20method%20for%20MFA.%3C%2FP%3E%3CP%3EBackground%3A%20not%20everybody%20possesses%20a%20corporate%20mobile%20phone%2C%20and%20is%20hesitant%20to%20disclose%20the%20private%20mobile%20number%2C%20and%20also%20don't%20want%20to%20use%20the%20App%2C%20as%20this%20requires%20Intune%20enrollment.%3C%2FP%3E%3CP%3EAlso%2C%20for%20employees%20never%20having%20to%20access%20their%20O365%20account%20from%20outside%20the%20corporate%20WAN%2C%20this%20would%20give%20them%20an%20option%20to%20%22occupy%22%20the%20second%20factor%2C%20and%20shutting%20password%20phishers%20%2F%20attackers%20out.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20our%20tenant%20I%20realized%20the%20office%20phone%20number%20carries%20over%20from%20AAD%20-%20but%20cannot%20be%20used%20as%20second%20factor.%20Are%20there%20any%20plans%20to%26nbsp%3Ballow%20that%3F%20Is%20it%20a%20limitation%20of%20the%20preview%20version%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355167%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355167%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20this%20feature%20depend%20on%20a%20particular%20version%20of%20Office%20365%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20dependency%20on%20Azure%20Premium%20for%20example%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355166%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355166%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everyone%2C%3C%2FP%3E%3CP%3EI%20am%20also%20working%20on%20enabling%20MFA%20%2B%20SSPR%20for%20about%2010.000%20users.%20The%20%22old%22%20converged%20experience%20didn't%20translate%20security%20questions%20to%20the%20browser's%20local%20so%20we%20skipped%20that%20version.%20The%20new%20experience%20looks%20even%20better%20(already%20available%20on%20all%20tenants%20I've%20checked)%2C%20looks%20like%20you've%20done%20a%20very%20good%20job.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3EUnfortunately%2C%20it%20seems%20to%20be%20in%20English%20only%20at%20the%20moment.%20Is%20there%20any%20roadmap%20for%20localized%20versions%3F%20That%20would%20help%20us%20very%20much%20for%20the%20project.%3C%2FP%3E%3CP%3EI'd%20really%20prefer%20using%20the%20converged%20experience%20instead%20of%20the%20split%20version%2C%20but%20those%20are%20deal%20breakers%20since%20not%20all%20users%20speak%20English.%20%3A%5C%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBR%3C%2FP%3E%3CP%3EChris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355101%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355101%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20tow%20questions%20about%20this%20enhancement.%3C%2FP%3E%3CP%3E1.%20When%20this%20new%20feature%20deploy%20to%20all%20tenants%20officially%3F%20If%20you%20have%20schedule(even%20tentative%2C%20not%20fixed)%20plan%2C%20please%20let%20me%20know.%3C%2FP%3E%3CP%3E2.%20Is%20it%20possible%20to%20tenant%20administrator%20disable%20this%20new%20feature%2C%20and%20keep%20using%20old%20style%20authentication%20registration%20panel%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt's%20important.%20Because%20we%20have%20a%20plan%20to%20enforce%20to%20use%20MFA%20to%20all%20our%20users%2C%20and%20currently%20we%20are%20preparing%20for%20that%2C%26nbsp%3B%20for%20example%2C%20making%20user%20manuals%20with%20lot%20of%20screen%20shots.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-422528%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-422528%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BHere's%20some%20small%20bugs%20I'll%20try%20to%20explain.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20this%20testing%20I%20just%20did%2C%20it%20was%20on%20Windows%2010%201809%20and%20Chrome%20(73.0.3683.103)%2064-bit%20but%20see%20the%20same%20behavior%20on%20Edge.%20We%20are%20using%20Azure%20AD%20Connect%20with%20PHS%20and%20SSO%20and%20have%20everything%20properly%20setup%20on%20the%20clients%20since%20SSO%20in%20general%20works%20for%20all%20Office%20365%20workloads.%20These%20are%20also%20testusers%20which%20I%20use%20to%20go%20back%20and%20forth%20between%20MFA%20methods%20so%20this%20might%20complicate%20the%20scenarios.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20agree%20these%20are%20all%20small%20bugs%20but%20all%20of%20them%20add%20up%20to%20the%20general%20experience%20of%20the%20new%20MFA%20setup%20which%20we%20are%20trying%20to%20sell%20to%20the%20customers%20and%20we%20really%20want%20to%20use%20the%20new%20experience%20since%20it's%20so%20much%20better%20and%20user%20friendly%20in%20general.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3E1.%3C%2FSTRONG%3E%20I%20often%20direct%20my%20users%20to%20aka.ms%2Fsetupsecurityinfo%20and%20sometimes%20you%20don't%20get%20SSO%20but%20instead%20reach%20a%20login%20page.%20But%20the%20next%20time%20they%20try%2C%20they%20get%20SSO.%26nbsp%3BSure%2C%20it%20works%20if%20they%20login%20but%20still%2C%20would%20be%20nice%20with%20consistent%20behavior.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20434px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106491i8C3D1BD7908151F0%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22setupsecurityinfo.png%22%20title%3D%22setupsecurityinfo.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3E2.%3C%2FSTRONG%3E%20We%20also%20see%20some%20strange%20behaviours%20in%20general%20adding%2Fremoving%20method%20during%20our%20testing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%2C%20one%20of%20my%20test%20users%20did%20not%20have%20MFA%20setup%20according%20to%20PowerShell%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20565px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106492i375205F848389408%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfa-nomethods.png%22%20title%3D%22mfa-nomethods.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EBut%20still%2C%20aka.ms%2Fsetupsecurityinfo%20showed%20Phone%20and%20the%20mobile%20number.%20I%20then%20added%20Microsoft%20Authenticator%20app%20and%20it%20gets%20added%20to%20the%20list.%20The%20Phone%20is%20still%20there%20but%20I%20can't%20choose%20it%20as%20a%20default%20method%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106496iFA02581503C9199C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfamethod_missing.png%22%20title%3D%22mfamethod_missing.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EAlso%20PowerShell%20shows%20only%20two%20methods%20available%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20567px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106497i725EC67E6766782B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22method_missing2.png%22%20title%3D%22method_missing2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EI%20suspect%20this%20has%20something%20to%20do%20with%20confirming%20the%20phone%20number.%20But%20how%20do%20I%20confirm%20it%3F%20I%20had%20to%20press%20%22Change%22%20but%20leave%20the%20number%20as-is%20(since%20it%20was%20correct)%20and%20then%20Next%20to%20confirm%20it.%20After%20that%20I%20could%20choose%20it%20as%20the%20default%20method%20and%20it's%20also%20showing%20up%20in%20PowerShell.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3E3.%3C%2FSTRONG%3E%20Also%2C%20notice%20the%20small%20bug%20when%20I%20added%20the%20Microsoft%20Authenticator.%20It's%20listed%20twice%20initially...%20Reloading%20the%20page%20next%20time%20removed%20the%20invalid%20one%20without%20a%20name.%20I%20only%20have%20on%20Authenticator%20install%20on%20one%20phone.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106498iCA8776823067B4A6%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfamethod_missing-duplicate.png%22%20title%3D%22mfamethod_missing-duplicate.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3E4.%3C%2FSTRONG%3E%20I%20then%20deleted%20all%20methods%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20991px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106499i4121CABB0C698420%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfamethod_deleted.png%22%20title%3D%22mfamethod_deleted.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EBut%20still%2C%20PowerShell%20showed%20methods%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20567px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106500i41284387CE106BD8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22method_missing2.png%22%20title%3D%22method_missing2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ETried%20to%20login%20externally%20and%20I%20get%20an%20error%20message%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20395px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106501i83785BF76F041712%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfa-error.png%22%20title%3D%22mfa-error.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EPressing%20the%20two%20choices%20for%20the%20app%20does%20nothing%20but%20I%20could%20send%20a%20text%20message.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3E5.%3C%2FSTRONG%3E%20We%20have%20also%20noticed%20when%20successfully%20scanning%20the%20QR%20code%20for%20adding%2C%20the%20spinning%20wheel%20just%20stays%20there%20forever.%20Forcing%20the%20Authenticator%20app%20checking%20for%20notifications%20says%20%22No%20notifications%20found%22.%20This%20forces%20the%20user%20to%20abort%20and%20restart%20the%20process%20and%20this%20time%20it%20might%20work.%20Don't%20know%20if%20this%20is%20something%20temporary%20right%20now%20during%20my%20testing%20but%20it%20would%20be%20great%20with%20some%20kind%20of%20%22timeout%22%20here%20and%20if%20the%20wizard%20fails%2C%20instruct%20the%20user%20what%20to%20do.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20738px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106503i3CBCEF472FDF28C6%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22mfa-forever.png%22%20title%3D%22mfa-forever.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-426187%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-426187%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3EI%20used%20to%20have%20these%20options%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F107548i752212B705733DA1%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22mfa%20settings.png%22%20title%3D%22mfa%20settings.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20first%20option%20was%20set%20to%20All%20and%20this%20gave%20us%20the%20new%20experience%2C%20working%20up%20until%20today%3C%2FP%3E%3CP%3EThe%20second%20option%20(enhanced)%20was%20set%20to%20None%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBy%20switching%20to%20the%20new%20enhanced%20mode%2C%20what%20has%20happened%20is%20the%20first%20option%20has%20dissapeared%20!!!!%3C%2FP%3E%3CP%3Ei%20only%20get%20option%202%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F107539i77531C39EECC7681%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture2.PNG%22%20title%3D%22Capture2.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20with%20the%20enhanced%20option%20set%20to%20ALL%20or%20selected%20group%3C%2FP%3E%3CP%3EWhen%20new%20users%20attempt%20to%20enroll%20a%20new%20android%20mobile%20device%20using%20company%20portal%20we%20end%20up%20with%20the%20follow%20message%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F107549i7E2297458ACF8CD1%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Error_SSPR_MFA.png%22%20title%3D%22Error_SSPR_MFA.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20i%20cant%20switch%20back%20to%20what%20we%20had%20before%20so%20why%20is%20this%20happened%3F%3C%2FP%3E%3CP%3EWhy%20we%20cant%20enroll%20mobile%20devices%20using%20the%20new%20enhanced%20option%20when%20it%20was%20working%20on%20the%20previous%20preview%20option%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20not%20good%20enough!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-432920%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-432920%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F19218%22%20target%3D%22_blank%22%3E%40Jonas%20Back%3C%2FA%3E%26nbsp%3BI'd%20definitely%20like%20to%20dig%20into%20these%20issues%20with%20you%20further.%20Can%20you%20send%20me%20a%20DM%20and%20we%20can%20look%20into%20this%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318400%22%20target%3D%22_blank%22%3E%40mackintoshc2019%3C%2FA%3E%26nbsp%3BWe%20are%20removing%20the%20control%20for%20the%20old%20version%20of%20public%20preview%2C%20which%20is%20why%20you%20no%20longer%20see%20that%20option.%20I%20was%20unaware%20of%20any%20issues%20with%20device%20enrollment%20but%20I'm%20happy%20to%20dig%20into%20it.%20Can%20you%20also%20send%20me%20a%20DM%20and%20we%20can%20look%20into%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-433242%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-433242%22%20slang%3D%22en-US%22%3E%3CP%3ELooking%20for%20conditional%20access%20on%20MFA%20registration%20as%20well!!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20control%20who%20is%20allowed%20to%20use%20which%20options%3F%20GroupA%20can%20use%20Phone%20or%20App%2C%20GroupB%20only%20use%20App%20for%20MFA%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-433253%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-433253%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318917%22%20target%3D%22_blank%22%3E%40Andrew_Christianson%3C%2FA%3E%26nbsp%3BNo%2C%20not%20yet%2C%20but%20we%20are%20working%20on%20both%20of%20those%20capabilities.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-435076%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-435076%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3Bare%20you%20saying%20that%20currently%20the%20enrollment%20doesnt%20work%20if%20Conditional%20Access%20are%20in%20place%20when%20the%20user%20attempts%20to%20log%20in%20and%20register%2C%20i%20have%26nbsp%3B%20CA%20policy%20in%20place%20that%20requires%20MFA%26nbsp%3B%20when%20a%20user%20attempts%20to%20enroll%20a%20mobile%20phone%2C%20so%20if%20it%20is%20first%20time%20they%20will%20be%20asked%20to%20register%20for%20MFA%20otherwise%20if%20they%20have%20already%20regsitered%20for%20MFA%20then%20they%20will%20be%20asked%20to%20provide%20their%20second%20factor.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20was%20working%20perfectly%20on%20teh%20OLD%20Preview%20settinsg%20and%20still%20works%20on%20non%20preview%20settings%2C%20just%20nothing%20in%20the%20new%20preview%20settings%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-444908%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-444908%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHello%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20doing%20some%20additional%20testing%20and%20found%20that%20the%20Enhanced%20Preview%20settings%20do%20work%20for%20enrolment%20via%20a%20Windows%2010%20device%2C%20i%20get%20requested%20to%20setup%20MFA%20via%20conditional%20Access%20Policy%20and%20then%20setup%20completes%20ok.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20problem%20i%20am%20seeing%20appears%20to%20be%20specifically%20with%20Android%20Mobile%20and%20Company%20Portal%2C%20i%20suspect%20the%20Company%20Portal%20cant%20handle%20the%20new%20preview%20settings%20and%20i%20get%20an%20unexpected%20error%20has%20occurred.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20this%20be%20verified%20if%20this%20is%20a%20known%20issue%20at%20all.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-445978%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-445978%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318400%22%20target%3D%22_blank%22%3E%40mackintoshc2019%3C%2FA%3E%26nbsp%3Bcould%20you%20send%20me%20a%20DM%20so%20that%20we%20can%20follow%20up%20via%20email%3F%20It%20would%20be%20great%20to%20get%20more%20details%20on%20this.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481604%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481604%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20new%20one%20is%20getting%20better.%26nbsp%3B%20A%20few%20notes.%3C%2FP%3E%3CP%3E1.%20the%20direction%2C%20it%20says%20to%20enable%20the%20%22%3CSPAN%3EUsers%20who%20can%20use%20the%20preview%20features%20for%20registering%20and%20managing%20security%20info%20%E2%80%93%20refresh%3C%2FSPAN%3E%22%20version%2C%20but%20in%20my%20tenant%20it%20says%20%22Users%20can%20use%20preview%20features%20for%20registering%20and%20managing%20security%20info%20%E2%80%93%20enhanced%22%20%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20Security%20Questions%20for%20SSPR%20are%20truncated%20by%20popup%20box%20and%20you%20cannot%20read%20the%20entire%20question.%26nbsp%3B%3C%2FP%3E%3CP%3E3.%20How%20do%20you%20know%20what%20options%20are%20for%20SSPR%20and%20which%20are%20for%20MFA%3F%20Can%20you%20add%20a%20column%20or%20comment%20to%20let%20the%20end%20users%20know%20that%20security%20questions%20or%20email%20is%20not%20available%20for%20MFA%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482646%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482646%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20currently%20using%20this%20new%20experience%20to%20enrol%20our%20users.%3C%2FP%3E%3CP%3EThe%20feedback%20we%20get%20from%20our%20users%20is%20that%20when%20the%20have%20to%20enter%20their%20private%2Fpersonal%20e-mail%20address%20for%20example%20..%40Hotmail.com%20or%20%E2%80%A6%40gmail.com%2C%20they%20enter%20their%20work%2Fschool%20e-mail%20address%20and%20this%20doesn%E2%80%99t%20work%20off%20course.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20please%20change%20description%20to%20make%20it%20more%20clear%20for%20users%20that%20they%20have%20to%20enter%20a%20personal%20e-mail%20address.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20569px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F110262iA5CD817DBBED98C6%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22temp.png%22%20title%3D%22temp.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482816%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482816%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3151%22%20target%3D%22_blank%22%3E%40Eric%20Kurtz%3C%2FA%3E%26nbsp%3Bthanks%20for%20the%20feedback!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EYes%2C%20the%20title%20has%20change%20slightly.%20We'll%20update%20our%20documentation.%20%3A)%3C%2Fimg%3E%3C%2FLI%3E%0A%3CLI%3ECan%20you%20private%20message%20me%20a%20screenshot%20of%20the%20security%20questions%20issue%3F%3C%2FLI%3E%0A%3CLI%3EWe%20don't%20indicate%20to%20the%20users%20which%20methods%20are%20used%20for%20what%20as%20we%20haven't%20found%20that%20user's%20are%20looking%20for%20that%20info.%20Have%20your%20users%20run%20into%20issues%20with%20this%3F%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482817%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482817%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F233448%22%20target%3D%22_blank%22%3E%40niels%20haaijer%3C%2FA%3E%26nbsp%3Bthanks%20for%20the%20feedback!%20We'll%20look%20into%20making%20this%20clearer%20for%20users.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-498844%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-498844%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%20-%20Recent%20Activity%20was%20on%20this%20portal%20when%20you%20released%20the%20feature%20for%20preview%2C%20but%20it%20is%20not%20there%20anymore.%20Can%20you%20share%20something%20on%20why%20this%20was%20removed%20and%20when%20you%20expect%20it%20to%20return%20please%3F%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-498854%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-498854%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3B%20you%20can%20still%20access%20the%20recent%20activity%20using%20this%20link%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fmysignins.microsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmysignins.microsoft.com%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-501230%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-501230%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3Bgreat%20question!%20Shoot%20me%20a%20DM%20and%20I'd%20be%20happy%20to%20discuss%20further.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-558366%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-558366%22%20slang%3D%22en-US%22%3EFirst%2C%20I%20like%20the%20trend%20that%20things%20are%20moving%20towards%20Azure%20AD%20and%20look%20forward%20to%20all%20MFA%20config%20to%20happen%20there%20in%20a%20consistent%20manner.%20Today%20it%20is%20too%20spread%20out%20in%20different%20portals.%20I%20would%20like%20to%20try%20this%20new%20experience%20out%20and%20have%20enabled%20the%20preview.%20I%20then%20created%20a%20Conditional%20Access%20Policy%20in%20Azure%20AD%20that%20requires%20MFA%20for%20a%20user.%20When%20he%20logs%20on%2C%20the%20browser%20thinks%20for%20a%20few%20seconds%2C%20and%20then%20there%20is%20just%20a%20page%20with%20a%20triangle%20and%20a%20few%20exclamation%20marks%20that%20says%20%22An%20unexpected%20error%20occured%22%20(or%20something%20like%20that%20in%20english%2C%20I%20am%20Swedish%20so%20it%20says%20the%20error%20in%20Swedish).%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%20Something%20is%20clearly%20broken%20with%20this%20new%20preview%20MFA%20experience%2C%20is%20there%20an%20ETA%20on%20when%20it%20will%20actually%20work%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-558958%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-558958%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F340038%22%20target%3D%22_blank%22%3E%40Henrik_-_CD%3C%2FA%3E%26nbsp%3B%20-%20I%20would%20love%20to%20learn%20more%20about%20the%20issue%20you're%20running%20into.%20I'm%20not%20aware%20of%20any%20issues%20that%20would%20cause%20that%20behavior.%20Can%20you%20send%20me%20a%20direct%20message%20and%20we%20can%20dig%20into%20the%20issue%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-561392%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-561392%22%20slang%3D%22en-US%22%3EHello%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E!%20I%20have%20changed%20to%20a%20more%20permanent%20persona%20for%20this%20forum.%20I%20have%20been%20testing%20this%20out%20more%20and%20have%20found%20this%3A%201.%20If%20I%20require%20a%20user%20to%20re-enroll%20MFA%2C%20the%20enrollment%20for%20this%20user%20breaks%20with%20an%20%22An%20unknown%20error%20ocured%22%20error.%20If%20I%20wait%20to%20the%20next%20day%20however%2C%20the%20enrollment%20for%20the%20user%20have%20self-healed%20and%20works%20again!%3F%20This%20is%20repeatable%20over%20days%20and%20the%20error%20is%20consistent.%202.%20I%20require%20two%20methods%20in%20the%20SSPR%20settings%20(but%20have%20not%20enabled%20SSPR%20itself)%20and%20these%20are%20to%20choose%20from%3A%20Mobile%20app%20notification%2C%20Mobile%20Phone%20and%20Office%20Phone.%20Still%2C%20I%20can%20get%20past%20the%20MFA%20enrollment%20by%20just%20configuring%20the%20app.%20How%20is%20this%3F%20Also%2C%20what%20is%20the%20use%20of%20the%20%22Office%20phone%22%20method%20in%20addition%20to%20mobile%20phone%3F%20I%20can%20only%20choose%20to%20add%20configuration%20for%20one%20%22type%22%20of%20phone%20with%20SMS%20or%20callback%20during%20the%20initial%20enrollment.%203.%20If%20I%20go%20to%20the%20security%20settings%20for%20a%20user%20after%20the%20enrollment%20(see%20point%201)%2C%20it's%20broken%20again%20and%20shows%20just%20the%20triangle%20and%20exclamation%20marks%20and%20%22Unknown%20error%22%20message.%204.%20When%20I%20configure%20the%20MFA%20methods%20in%20the%20SSPR%20area%2C%20I%20have%20to%20require%20two%20methods%20to%20even%20light%20up%20the%20choice%20to%20use%20the%20app%20notifications.%20I%20am%20then%20for%20some%20reason%20forced%20to%20choose%20three%20methods%20when%20requiring%20only%20two.%20But%20in%20the%20end%20I%20can%20get%20away%20with%20only%20one%20when%20configuring%20(see%20point%202).%205.%20Why%20is%20the%20settings%20for%20MFA%20methods%20located%20in%20the%20SSPR%20settings%3F%20If%20the%20same%20settings%20are%20for%20both%20things%2C%20they%20should%20be%20consolidated%20somewhere%20more%20logical.%20%22Where%20do%20I%20configure%20the%20MFA%20settings%3F%20In%20the%20SSPR%20area%20whether%20SSPR%20is%20configured%20or%20not!%20Eh%20ok%3F%22.%20Also%2C%20the%20fact%20that%20MFA%20seetings%20are%20available%20in%20both%20the%20old%20portal%20and%20the%20new%20without%20any%20clear%20info%20on%20the%20correlation%20between%20the%20two%20does%20not%20exactly%20help.%20A%20more%20fine-grained%20setup%20would%20also%20be%20great%2C%20where%20you%20can%20choose%20different%20MFA%20methods%20and%20requirements%20for%20different%20users%20in%20a%20broader%20framework%20regarding%20login%20security%20for%20a%20user.%20Listen%2C%20I%20get%20that%20you%20are%20trying%20to%20simplify%20this%20setup%20for%20the%20users%20which%20is%20great.%20But%20as%20of%20right%20now%2C%20it%20all%20seems%20to%20be%20a%20mess%20and%20does%20not%20work.%20If%20I%20was%20to%20release%20this%20in%20our%20live%20environment%20it%20would%20be%20disaster%20as%20per%20the%20bullets%20above.%20I%20would%20be%20interested%20in%20getting%20this%20to%20work%20properly%2C%20do%20contact%20me%20if%20you%20want%20additional%20feedback.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-561395%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-561395%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E!%20I%20have%20changed%20to%20a%20more%20permanent%20persona%20for%20this%20forum.%20I%20have%20been%20testing%20this%20out%20more%20and%20have%20found%20this%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CFONT%3EIf%20I%20require%20a%20user%20to%20re-enroll%20MFA%2C%20the%20enrollment%20for%20this%20user%20breaks%20with%20an%20%22An%20unknown%20error%20occurred%22%20error.%20If%20I%20wait%20to%20the%20next%20day%20however%2C%20the%20enrollment%20for%20the%20user%20have%20self-healed%20and%20works%20again!%3F%20This%20is%20repeatable%20over%20days%20and%20the%20error%20is%20consistent.%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EIf%20I%20go%20to%20the%20security%20settings%20for%20a%20user%20after%20the%20enrollment%20(see%20point%201)%2C%20it's%20broken%20again%20and%20shows%20just%20the%20triangle%20and%20exclamation%20marks%20and%20%22Unknown%20error%22%20message.%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EWhen%20I%20configure%20the%20MFA%20methods%20in%20the%20SSPR%20area%2C%20I%20have%20to%20require%20two%20methods%20to%20even%20light%20up%20the%20choice%20to%20use%20the%20app%20notifications.%20I%20am%20then%20for%20some%20reason%20forced%20to%20choose%20three%20methods%20when%20requiring%20only%20two.%20Also%2C%20I%20am%20offered%20to%20configure%20app%20codes%20even%20if%20this%20is%20not%20chosen%20in%20the%20SSPR%20methods%20but%20is%20however%20allowed%20in%20the%20old%20portal%2C%20is%20this%20to%20be%20expected%3F%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EWhy%20are%20the%20settings%20for%20MFA%20methods%20located%20in%20the%20SSPR%20settings%3F%20If%20the%20same%20settings%20are%20for%20both%20things%2C%20they%20should%20be%20consolidated%20somewhere%20more%20logical.%20%22Where%20do%20I%20configure%20the%20MFA%20settings%3F%20In%20the%20SSPR%20area%20whether%20SSPR%20is%20configured%20or%20not!%20Eh%20ok%3F%22.%20Also%2C%20the%20fact%20that%20MFA%20settings%20are%20available%20in%20both%20the%20old%20portal%20and%20the%20new%20without%20any%20clear%20info%20on%20the%20correlation%20between%20the%20two%20does%20not%20exactly%20help.%20A%20more%20fine-grained%20setup%20would%20also%20be%20great%2C%20where%20you%20can%20choose%20different%20MFA%20methods%20and%20requirements%20for%20different%20users%20in%20a%20broader%20framework%20regarding%20login%20security%20for%20a%20user.%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EListen%2C%20I%20get%20that%20you%20are%20trying%20to%20simplify%20this%20setup%20for%20the%20users%20which%20is%20great.%20But%20as%20of%20right%20now%2C%20it%20does%20not%20work.%20If%20I%20was%20to%20release%20this%20in%20our%20live%20environment%20it%20would%20be%20disaster%20with%20the%20errors%20that%20occur.%20I%20would%20be%20interested%20in%20getting%20this%20to%20work%20properly%2C%20do%20contact%20me%20if%20you%20want%20additional%20feedback.%3C%2FFONT%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-561389%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-561389%22%20slang%3D%22en-US%22%3E%3CP%3ERemoved%20..%20Double%20post%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-561394%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-561394%22%20slang%3D%22en-US%22%3E%3CP%3ERemoved%20..%20Double%20post%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-638129%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-638129%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BWe%20are%20also%20seeing%20the%20%22unexpected%20error%20has%20occurred%22%20under%20certain%20circumstances.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20IE%20protected%20mode%20disabled%20for%20trusted%20sites...%3C%2FP%3E%3CP%3EUsing%20Edge%20or%20Firefox%20in%20private%20mode%2C%20accessing%20aka.ms%2Fmfasetup%20and%20signing%20in%2C%20we%20are%20given%20the%20%22unexpected%20error%20has%20occurred%22%3C%2FP%3E%3CP%3EUsing%20IE%20in%20private%20mode%2C%20isn't%20really%20private.%26nbsp%3B%20Trying%20to%20use%20an%20account%20other%20than%20the%20one%20signed%20into%20Windows%2C%20ultimately%20reverts%20back%20to%20the%20Windows%20signed%20in%20user.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-638174%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-638174%22%20slang%3D%22en-US%22%3E%3CP%3EIndeed%20there%20is%20a%20problem%20with%20this.%20I%20hope%20they%20will%20fix%20it%20as%20I%20truly%20like%20the%20new%20look%20of%20it.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-645055%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-645055%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F19218%22%20target%3D%22_blank%22%3E%40Jonas%20Back%3C%2FA%3E%26nbsp%3BI%20am%20seeing%20the%20same%20experience%20when%20scanning%20a%20QR%20code%20for%20Authenticator%20just%20spins%20forever%20and%20the%20push%20never%20goes%20through%20to%20the%20end%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20addition%2C%20I%20think%20the%20current%20flow%20is%20a%20bit%20illogical.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20a%20new%20user%20first%20logs%20in%20and%20goes%20through%20the%20MFA%20registration%2C%20the%20default%20method%20is%20via%20TOTP%20code%20using%20the%20Authenticator%20app.%26nbsp%3B%20In%20order%20to%20configure%20push%20notifications%2C%20they%20have%20to%20re-register%20a%20second%20time%20leaving%20two%20authenticators%20in%20the%20app%20which%20is%20extremely%20confusing.%26nbsp%3B%20How%20do%20you%20configure%20it%20so%20they%20register%20only%20once%20with%20the%20default%20method%20being%20push%3F%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-645151%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-645151%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F19218%22%20target%3D%22_blank%22%3E%40Jonas%20Back%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20seen%20the%20same%20spinning%20while%20trying%20to%20authenticate%20using%20push%20notification%20this%20method%20when%20the%20user%20is%20using%20an%20Android%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20believe%20there%20is%20a%20workflow%20issue%20as%20well%20when%20logging%20into%20the%20account%20for%20the%20first%20time.%20Upon%20initial%20MFA%20registration%2C%20you%20are%20prompted%20to%20use%20%22In%20your%20app%2C%20add%20an%20account%20and%20select%20%22Other%22.%26nbsp%3B%20This%20should%20default%20to%20the%20work%20or%20school%20method%20so%20the%20user%20can%20register%20for%20push%20notification%20immediately%20upon%20registration.%26nbsp%3B%20%26nbsp%3BCan%20we%20modify%20this%3F%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F115972i3480CA0D9266CE3C%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22XaMw2hYeFv.png%22%20title%3D%22XaMw2hYeFv.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-645604%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-645604%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F340853%22%20target%3D%22_blank%22%3E%40HenrikEl%3C%2FA%3E%26nbsp%3BThanks%20for%20all%20of%20your%20feedback!%20We%20are%20looking%20into%20the%20bugs%20that%20you%20mentioned%20around%20clearing%20MFA%20and%20getting%20an%20error%20when%20you%20try%20to%20access%20the%20registration%20page.%20We%20are%20also%20working%20to%20bring%20the%20administrative%20experience%20for%20MFA%20and%20SSPR%20together%20so%20that%20it's%20easy%20and%20clear%20how%20to%20configure%20methods%20for%20a%20user.%20This%20will%20make%20things%20much%20simpler%20and%20clearer.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F301174%22%20target%3D%22_blank%22%3E%40Andy-H%3C%2FA%3E%26nbsp%3BWe're%20also%20looking%20into%20this.%20This%20is%20currently%20a%20known%20issue%20and%20we%20are%20working%20to%20fix%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F342052%22%20target%3D%22_blank%22%3E%40JB_MG%3C%2FA%3E%26nbsp%3BYou%20are%20seeing%20the%20flow%20that%20happens%20when%20only%20mobile%20app%20code%20is%20enabled%20for%20the%20user.%20If%20you're%20registering%20using%20mobile%20app%20code%2C%20the%20account%20you%20have%20to%20select%20is%20%22Other%22.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%2C%20folks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-652431%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-652431%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3ESimilar%20but%20different%20to%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F340853%22%20target%3D%22_blank%22%3E%40HenrikEl%3C%2FA%3E%20%2C%20if%20a%20user%20deletes%20all%20instances%20of%20their%20registered%20Authenticator%20apps%2C%20and%20tries%20to%20re-enroll%2C%20the%20web%20pages%20just%20loop%20back%20and%20forth.%26nbsp%3B%20I%20had%20created%20a%20case%20with%20MS%20and%20was%20told%20that%20the%20web%20page%20looping%20is%20by%20design!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20an%20aside%2C%20we%20really%20need%20a%20way%20to%20differentiate%20the%20different%20authenticator%20apps%20within%20a%20user's%20profile%20so%20they%20don't%20delete%20all%20or%20the%20wrong%20one.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-653257%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-653257%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F301174%22%20target%3D%22_blank%22%3E%40Andy-H%3C%2FA%3E%26nbsp%3BI'll%20look%20into%20the%20looping%20issue%20for%20you.%20If%20the%20user%20registers%20Microsoft%20Authenticator%2C%20we%20will%20show%20the%20device%20name%20if%20we%20are%20able%20to%20retrieve%20it%2C%20which%20differentiates%20the%20apps.%20Feel%20free%20to%20shoot%20me%20a%20DM%20and%20we%20can%20discuss%20further.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-680185%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-680185%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%20-%20as%20we've%20rolled%20this%20out%20to%20all%20our%20staff%2C%20I've%20had%20an%20interesting%20problem%20popup%20that%20I%20was%20able%20to%20recreate%20on%20a%20test%20account%20-%20apologies%20if%20this%20has%20already%20been%20reported!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20problem%20is%20that%20if%20a%20user%20chooses%20to%20use%20their%20Phone%20as%20the%20first%20method%2C%20and%20then%20on%20the%20second%20method%20they%20want%20to%20use%20email%2C%20they%20must%20do%20that%20there%20and%20then.%20If%20for%20whatever%20reason%20they%20don't%20complete%20the%20process%20(such%20as%20it%20timing%20out)%2C%20then%20when%20they%20return%20to%20the%20setup%20page%2C%20%22Phone%22%20has%20moved%20to%20being%20the%20second%20method%2C%20and%20the%20first%20option%20doesn't%20let%20you%20choose%20%22I%20want%20to%20set%20up%20a%20different%20method%22%20anymore%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20style%3D%22width%3A%20744px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F117617i55436F2C8F5A41FF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Method%20problem.png%22%20title%3D%22Method%20problem.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-688359%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-688359%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F6812%22%20target%3D%22_blank%22%3E%40Ben%20Watt%3C%2FA%3E%26nbsp%3Bthanks%20for%20notifying%20me%20of%20this!%20I'd%20like%20to%20understand%20more%20about%20your%20MFA%20and%20SSPR%20policies%20to%20troubleshoot%20what's%20going%20on.%20Can%20you%20send%20me%20a%20DM%20with%20the%20info%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-699611%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-699611%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22text-align%3A%20left%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3Bjust%20noticed%20that%20when%20I%20have%20this%20UX%20enabled%20and%20I%20login%20to%20a%20new%20device%20as%20a%20Azure%20AD%20user%20I%20get%20asked%20to%20set%20up%20a%20PIN.%20If%20I%20choose%20to%20defer%20this%20for%2014%20days%20it%20ignores%20me%20and%20I%20need%20to%20complete%20the%20new%20wizard.%20The%20PIN%20UI%20is%20square%20in%20Windows%2010%20(1809)%20but%20the%20combined%20wizard%20is%20not%20square%2C%20so%20it%20does%20not%20fit%20well%20on%20the%20screen%20and%20then%20at%20the%20end%20of%20adding%20a%20new%20authenticator%20and%20phone%20number%20it%20presents%20me%20with%20the%20Myapps%20portal%20-%20but%20I%20am%20inside%20the%20PIN%20UI%20in%20Windows.%20I've%20uploaded%20a%20photo%20so%20you%20can%20see%20what%20it%20looks%20like%20below%2C%20and%20then%20it%20fails%20to%20register%20the%20pin%20if%20I%20close%20that%20UX%20with%20the%20cross%20top%20right%20(there%20is%20no%20other%20way%20out%20anyway).%20PIN%20registration%20then%20works%20if%20you%20choose%20Try%20Again%20in%20the%20error%20page%2C%20as%20this%20time%20I%20don't%20need%20to%20register%20but%20just%20enter%20the%20authenticator%20code%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20472px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F119245i27BC4034ADB87CF2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%2215608635564853709219170772778405.jpg%22%20title%3D%2215608635564853709219170772778405.jpg%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EPIN%20UI%20with%20combination%20wizard%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22text-align%3A%20left%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F119246i69C0BD356615862F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%2215608635883836949154458591764882.jpg%22%20title%3D%2215608635883836949154458591764882.jpg%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EPIN%20setup%20error%20afterwards%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-713964%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-713964%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B-%20Hi%2C%20tried%20to%20register%20a%20few%20people%20into%20this%20feature%20when%20using%20an%20iPad.%20But%20in%20both%20Safari%20and%20Chrome%20it%20would%20not%20show%20the%20QRCode%20and%20only%20the%20code%20to%20enter%20by%20hand%20and%20the%20URL%2C%20which%20is%20quite%20hard%20to%20type%20by%20hand.%20Any%20idea%20why%20iPad's%20are%20not%20showing%20the%20QRCode%3F%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20189px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F120110iFF64A4EC91114D93%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22IMG_20190621_140026.jpg%22%20title%3D%22IMG_20190621_140026.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBrian%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-714162%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-714162%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3B-%20What's%20happening%20is%20that%20we're%20detecting%20you're%20on%20a%20mobile%20device%20and%20we%20assume%20it's%20the%20same%20mobile%20device%20that%20the%20app%20is%20on.%20Thus%2C%20we're%20not%20showing%20the%20QR%20code%20and%20we're%20giving%20you%20the%20copy%2Fpaste%20option%20instead.%20Does%20that%20clarify%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-714218%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-714218%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3B-%20can%20you%20send%20me%20a%20DM%20about%20the%20PIN%20issue%3F%20PIN%20registration%20is%20separate%20from%20the%20combined%20experience%2C%20so%20I'm%20not%20sure%20what's%20going%20on%20there.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-714546%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-714546%22%20slang%3D%22en-US%22%3E%3CP%3EOK%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B-%20regards%20the%20lack%20of%20QR%20code%20-%20for%20one%20of%20my%20clients%2C%20the%20iPad%20is%20the%20end%20users%20computing%20device%20and%20the%20phone%20is%20the%20second%20factor%20-%20the%20iPad%20itself%2C%20though%20mobile%2C%20is%20treated%20like%20a%20laptop.%20Therefore%20it%20would%20be%20useful%20if%20we%20could%20have%20the%20reverse%20of%20the%20%22can't%20scan%20image%22%20option%20(which%20gives%20us%20codes%20to%20enter%2Fcopy%2Bpaste%2C%20and%20have%20a%20%22show%20QR%20code%22%20so%20that%20we%20can%20scan%20something%20when%20the%20above%20and%20similar%20scenarios%20are%20met.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-726721%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-726721%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%20I'm%20not%20sure%20if%20this%20has%20been%20addressed%20already%2C%20but%20I%20just%20signed%20up%20for%20a%20preview%20of%20the%20new%20experience.%20Upon%20enabling%20a%20test%20user%20with%20MFA%2C%20it%20only%20made%20me%20set%20up%20the%20authenticator%20app.%20Is%20there%20any%20way%20to%20force%20users%20to%20sign%20up%20at%20least%20one%20more%20authentication%20method%2C%20such%20as%20a%20phone%20number%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-727592%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-727592%22%20slang%3D%22en-US%22%3E%3CP%3EDo%20you%20have%20phone%20enabled%20in%20the%20MFA%20cloud%20settings%20area%20of%20the%20admin%20portal%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-730386%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-730386%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20all%20types%20are%20enabled.%20I%20see%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FAzure-Active-Directory-Identity%2FCool-enhancements-to-the-Azure-AD-combined-MFA-and-password%2Fbc-p%2F680185%2Fhighlight%2Ftrue%23M1233%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FAzure-Active-Directory-Identity%2FCool-enhancements-to-the-Azure-AD-combined-MFA-and-password%2Fbc-p%2F680185%2Fhighlight%2Ftrue%23M1233%3C%2FA%3E%26nbsp%3Bthat%20there's%20the%20%22two%20methods%22%20at%20the%20top.%20I%20don't%20see%20any%20of%20that.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-751360%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-751360%22%20slang%3D%22en-US%22%3E%3CP%3EFolks%20-%20apologies%20for%20the%20delayed%20response!%20I%20just%20returned%20from%20being%20out%20of%20town.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3B-%20that's%20a%20great%20suggestion.%20I%20will%20look%20into%20this%20with%20my%20team.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F369022%22%20target%3D%22_blank%22%3E%40Derek_Jew%3C%2FA%3E%26nbsp%3B-%20if%20you%20require%20two%20methods%20for%20SSPR%2C%20the%20user%20will%20be%20required%20to%20register%20two%20methods.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-766701%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-766701%22%20slang%3D%22en-US%22%3EWe%20are%20also%20running%20into%20the%20%22An%20Unexpected%20error%20has%20occurred%22%20issue%20as%20mentioned%20in%20several%20post.%20We've%20tried%20adjusting%20the%20IE%20security%20settings%20as%20suggest%20but%20this%20issue%20still%20occurs.%20Has%20a%20true%20solution%20to%20this%20issue%20been%20found%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-789826%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789826%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20not%20reviewed%20all%20of%20the%20comments%2C%20so%20sorry%20if%20I'm%20doubling%20up.%20Firstly%2C%20the%20new%20experience%20is%20a%20massive%20improvement%2C%20and%20I'm%20training%20it%20as%20part%20of%20trailing%20the%20support%20for%20Security%20Keys.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20thing%20I've%20noticed%20is%20you%20appear%20to%20need%20to%20allow%20third%20party%20cookies%2C%20and%2For%20disable%20the%20'prevent%20cross-site%20tracking'%20features%20in%20the%20browser%20to%20work.%20Is%20this%20because%20it%20is%20a%20preview%20release%2C%20or%20is%20this%20related%20to%20the%20cookies%20not%20working%20across%20different%20domains%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJames%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-789916%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789916%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20is%20the%20timeline%20for%20this%20to%20be%20GA%3F%26nbsp%3B%20We%20would%20like%20to%20get%20this%20turned%20on%20before%20the%20start%20of%20school%20so%20the%20students%20have%20a%20better%20experience.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-795186%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-795186%22%20slang%3D%22en-US%22%3E%3CP%3EJames%20-%20glad%20to%20hear%20that%20you're%20liking%20the%20new%20experience!%20The%20issue%20you%20mentioned%20is%20a%20known%20issue%20that%20we're%20working%20to%20address%20now.%20You%20can%20expect%20a%20fix%20to%20be%20rolled%20out%20soon.%20%3A)%3C%2Fimg%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EEric%20-%20we're%20targeting%20GA%20in%20the%20next%20few%20months.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-795247%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-795247%22%20slang%3D%22en-US%22%3EWe%20are%20getting%20the%20following%20prompt%20today%20for%20some%20-%20but%20not%20all%20-%20users%20trying%20to%20register%20for%20MFA%20via%20aka.ms%2Fsetupsecurityinfo%20%22The%20selected%20account%20does%20not%20exist%20in%20client%20%22Microsoft%22%20and%20cannot%20access%20the%20application%20%226d544468-7fef-481a-9bdf-f2314ee734fe%22%20in%20that%20client.%20The%20account%20has%20to%20be%20added%20as%20external%20user%20in%20that%20client%20first.%20Please%20use%20another%20account%22%20Are%20there%20currently%20changes%20being%20made%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-808636%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-808636%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E-%20Thanks%20for%20providing%20lots%20of%20great%20feedback%20on%20this%20capability.%20We%20are%20hoping%20to%20role%20the%20combined%20MFA%2FSSPR%20experience%20out%20to%20our%20entire%20organiztion%20starting%20in%20a%20fews%20but%20are%20running%20into%20the%20%22an%20unexpected%20erro%20has%20occured%22%20issue%20that%20has%20been%20mentioned%20several%20times%20in%20the%20comments.%20Do%20you%20have%20any%20feedback%20on%20when%20this%20might%20be%20resolved%20and%2For%20work%20arounds%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-812095%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812095%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20way%20to%20change%20which%20registration%20method%20is%20'default'%3F%20Meaning%2C%20does%20the%20App%20need%20to%20be%20the%20first%20to%20attempt%20to%20register%20the%20user%3F%20We've%20enabled%20the%20application%20method%20for%20users%2C%20but%20most%20are%20using%20the%20Phone%20method%20and%20we%20want%20that%20to%20show%20first%20as%20an%20option%20during%20registration%20instead%20of%20mobile%20app.%26nbsp%3B%20Otherwise%20we%20need%20to%20instruct%20most%20of%20users%20to%20go%20to%20the%20'I%20want%20to%20setup%20a%20different%20method'%20twice%20%2C%20once%20for%20each%20authentication%20method%20they%20need%20to%20setup%20where%20it%20defaults%20to%20trying%20to%20push%20the%20Mobile%20app%20first.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F127569i1517AB75DDC6E8A0%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_0.png%22%20title%3D%22clipboard_image_0.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-812378%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812378%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F394887%22%20target%3D%22_blank%22%3E%40Mattk623%3C%2FA%3E%26nbsp%3B-%20if%20you%20disable%20the%20app%20option%20in%20both%20MFA%20and%20SSPR%20then%20you%20will%20get%20phone%20first.%20Your%20default%20is%20the%20first%20option%20you%20register%20with.%20You%20can%20only%20change%20your%20default%20after%20you%20register.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOut%20of%20interest%20though%2C%20why%20are%20they%20using%20phone%20as%20first%20preference%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-812443%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812443%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20quick%20response.%20I%20guess%20we%20were%20hoping%20to%20keep%20the%20app%20option%20for%20those%20that%20use%20it%20just%20not%20make%20it%20the%20first%20one%20that%20comes%20up%20on%20registration%2C%20but%20instead%20make%20the%20phone%20(text)%20registration%20be%20the%20first%20one%2C%20so%20I%20was%20hoping%20not%20to%20disable%20the%20app%20option%20all%20together.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20you%20confirm%20your%20question%20of%20why%20they%20are%20using%20phone%20as%20first%20preference%3F%20As%20opposed%20to%20the%20app%3F%20We%20have%20about%201100%20users%20registered%20so%20far%2C%20and%2090%25%20of%20them%20have%20asked%20to%20use%20a%20text%20code%20instead%20of%20the%20app%20-%20we%20tried%20to%20push%20the%20app%20as%20the%20'recommended'%20option%20but%20too%20many%20users%20didn't%20want%20to%20download%20an%20app%20or%20thought%20it%20was%20too%20complicated.%20Does%20that%20answer%20what%20you%20were%20asking%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-812946%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812946%22%20slang%3D%22en-US%22%3E%3CP%3EFYI%3A%20We%20are%20also%20running%20into%20the%20'an%20unexpected%20error%20has%20occurred'%20error%20on%20some%20users%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-813006%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-813006%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F394887%22%20target%3D%22_blank%22%3E%40Mattk623%3C%2FA%3E%26nbsp%3Byes%2C%20that's%20the%20aim%20of%20the%20question%20-%20so%20a%20second%20question%20if%20you%20don't%20mind%20-%20I%20can%20see%20users%20thinking%20the%20app%20code%20is%20harder%20than%20SMS%2C%20but%20what%20about%20push%20notifications%20where%20they%20need%20to%20do%20next%20to%20nothing%20at%20all%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3Bit%20would%20be%20great%20if%20Microsoft%20where%20to%20include%20an%20admin%20driven%20default%20as%20I%20discovered%20when%20writing%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fc7solutions.com%2F2019%2F08%2FMFA-and-end-user-impacts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fc7solutions.com%2F2019%2F08%2FMFA-and-end-user-impacts%3C%2FA%3Ethat%20the%20different%20wizards%20have%20different%20defaults%20and%20it%20changes%20based%20on%20what%20methods%20are%20allowed%20as%20well.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-813020%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-813020%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3BI%20agree%20for%20me%20personally%20-%20however%20the%20'go%20to%20the%20app%20store%20and%20download%20an%20application'%20was%20where%20a%20lot%20of%20sadly%20users%20threw%20up%20their%20hands%20%3B).%20We're%20having%20to%20deploy%20FOBs%20for%20a%20handful%20of%20users%20who%20were%20even%20afraid%20of%20getting%20a%20text%20message.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-813225%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-813225%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F394887%22%20target%3D%22_blank%22%3E%40Mattk623%3C%2FA%3E%26nbsp%3BThank%20you%20for%20your%20feedback!%20This%20is%20definitely%20something%20we've%20considered%20and%20we'll%20continue%20to%20look%20into%20it.%20Because%20the%20Microsoft%20Authenticator%20app%20option%20is%20more%20secure%20than%20phone%2C%20we%20do%20want%20to%20do%20everything%20we%20can%20to%20push%20users%20towards%20that%20option.%20We're%20working%20on%20making%20that%20flow%20even%20easier%20for%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-822864%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-822864%22%20slang%3D%22en-US%22%3E%3CP%3E%22An%20unexpected%20error%20has%20occurred.%22%20is%20displayed%20for%20my%20test%20user.%3C%2FP%3E%3CP%3ECustomer%20has%20Azure%20P1...%26nbsp%3B%20from%20the%20documentation%2C%20it%20seems%20that%20they%20would%20only%20get%20the%20combined%20registration%20experience%20IF%20they%20experience%20MFA%20and%20SSPR%20Registration%20at%20the%20next%20login%20(requires%20the%20next%20login%20to%20be%20a%20Conditional%20Access%20trigger%20AND%20the%20first%20login%20after%20being%20bound%20by%20SSPR).%26nbsp%3B%20Since%20we're%20not%20P2%2C%20we%20can't%20use%20identity%20protection%20to%20roll-out%20the%20MFA%20registration%20and%20so%20the%20combine%20registration%20experience%20would%20only%20hit%20if%20all%20conditions%20happened%20at%20the%20same%20time.%26nbsp%3B%20Seems%20if%20a%20user%20tries%20to%20pre-register%2C%20they%20get%20the%20error.%26nbsp%3B%20We%20have%20to%20disable%20this%20feature%20since%20it%20is%20preventing%20all%20from%20registering%20MFA%20before%20binding%20them%20to%20MFA.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-823758%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-823758%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F102363%22%20target%3D%22_blank%22%3E%40nick%20aquino%3C%2FA%3E%26nbsp%3Byou%20only%20need%20to%20(and%20should%20only)%20enforce%20registration%20in%20one%20place%2C%20whether%20that's%20through%20SSPR%20or%20by%20using%20conditional%20access%20or%20Identity%20Protection.%20Check%20out%20aka.ms%2Fsecurityinfodocs%20for%20a%20flowchart%20of%20how%20registration%20is%20enforced.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-826189%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-826189%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20calling%20code%20(%2B1%20721)%20of%20Sint%20Maarten%20is%20missing%20in%20the%20drop%20down%20list%20when%20entering%20a%20phone%20number.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-899991%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-899991%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%2C%26nbsp%3Bthanks%20for%20taking%20the%20time%20to%20answer%20all%20these%20questions!%20One%20of%20the%20big%20changes%20we've%20noticed%20when%20switching%20away%20from%20enforced%20MFA%20to%20Conditional%20Access%20is%20that%20the%20users%20no%20longer%20have%20the%20ability%20to%20manage%20their%20security%20info%20by%20clicking%20on%20their%20picture%20in%20the%20Office%20365%20portal%2C%20selecting%20my%20account%2C%20and%20then%20going%20to%20the%20security%20and%20privacy%20page.%20You%20mentioned%20earlier%20that%20you%20can%20direct%20users%20to%20go%20to%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fmysecurityinfo%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Fmysecurityinfo%3C%2FA%3E%2C%20which%20works%20great%20with%20the%20new%20preview%20features%20-%20my%20question%20is%20around%20that%20specific%20functionality%20of%20users%20being%20able%20to%20click%20on%20a%20link%20in%20their%20account%20info%20and%20get%20redirected%20to%20their%20security%20page.%20Is%20this%20going%20to%20be%20updated%20soon%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECurrently%2C%20there%20is%20no%20direct%20link%20in%20the%20portal%20to%20take%20users%20to%20the%20new%20My%20Profile%20page%20-%20will%20this%20be%20coming%20soon%2C%20or%20how%20are%20users%20expected%20to%20find%20and%20edit%20their%20security%20info%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-907420%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-907420%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Jeremy%20-%20great%20feedback!%20We%20are%20working%20right%20now%20on%20giving%20users%20a%20clear%20path%20to%20their%20profile%20and%20the%20security%20info%20page.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-917247%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-917247%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%2C%20great%20work%20heading%20in%20this%20direction!%20This%20is%20the%20user%20experience%20we%20need%20to%20have%20any%20hope%20in%20successfully%20releasing%20Microsoft%20MFA%20to%20our%20organization.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20after%20several%20months%20of%20evaluating%20and%20piloting%20the%20legacy%20MFA%20experience%2C%20keeping%20an%20eye%20on%20the%20%22Combined%20Registration%22%20preview%2C%20we%20enabled%20the%20enhanced%20experience%20today%20for%20our%20project%20team%20members.%20We%20are%20excited%20at%20the%20improved%20visual%20and%20instructional%20experience%2C%20but%20we%20have%20seen%20a%20troubling%20issue%20that%20I%20hope%20I%20can%20get%20some%20input%20on.%3C%2FP%3E%3CH3%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%20id%3D%22toc-hId-1505505843%22%3EError%20with%20%22Download%20now%22%20and%20%22Pair%20you%20account%20to%20the%20app%20by%20clicking%20this%20link.%22%20links%20on%20Android%20and%20iOS.%3C%2FH3%3E%3CP%3EI%20have%20included%20images%20below%20to%20what%20I%20am%20referencing.%20They%20are%20from%20the%20post-login%2C%20pre-registration%20process%20on%20a%20Pixel%203%20with%20Android%2010%20in%20the%20Outlook%20app.%20Both%20links%20are%20not%20working%20properly.%20Clicking%2Ftapping%20on%20them%20results%20in%20either%20a%20toast%20message%20stating%2C%20%22An%20error%20occurred.%22%20or%20a%20spinning%20wheel%20that%20does%20not%20resolve.%3CSTRONG%3E%3CBR%20%2F%3E%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CTABLE%20border%3D%221%22%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CSTRONG%3E%22Download%20now%22%20link%3C%2FSTRONG%3E%3C%2FTD%3E%3CTD%3E%3CSTRONG%3E%22Pair%20you%20account...%22%20link%3C%2FSTRONG%3E%3C%2FTD%3E%3CTD%3E%3CSTRONG%3EToast%20error%20message%3C%2FSTRONG%3E%3C%2FTD%3E%3CTD%3E%3CSTRONG%3ESpinning%20wheel%3C%2FSTRONG%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20211px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F138105iBB7FFBB7A939A597%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_0.png%22%20title%3D%22clipboard_image_0.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F138107iB0632DBFA6B52552%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_2.png%22%20title%3D%22clipboard_image_2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FTD%3E%3CTD%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F138106i290499D64E74E0BC%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_1.png%22%20title%3D%22clipboard_image_1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FTD%3E%3CTD%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F138108i37A034D142D7FA92%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_3.png%22%20title%3D%22clipboard_image_3.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdditionally%2C%20you%20may%20notice%20there%20is%20a%20typo%20in%20that%20pair%20link%20where%20it%20reads%20%22Pair%20you%22%20instead%20of%20%22Pair%20your.%22%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-962387%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-962387%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B%20In%20the%20old%20standalone%20mfa%20registration%20process%2C%20administrators%20could%20enable%2Fdisable%20mfa%20methods%20a-la-carte%20in%20the%20legacy%20Azure%20AD%20mfa%20settings%20screen%20-%20including%20enabling%20phone%20while%20disabling%20SMS.%20In%20converged%20registration%20-%20in%20the%20interrupt%20mode%20-%20it%20looks%20like%20users%20always%20have%20the%20choice%20of%20mobile%20app%20(push%20and%20passcode)%2C%20phone%2Fvoice%2C%20and%20SMS.%20It%20looks%20like%20the%20converged-interrupt%20mfa%20registration%20screen%20does%20not%20honor%20either%20the%20legacy%20mfa%20settings%20screen%20or%20the%20sspr%20settings%20screen.%20i.e.%20if%20i%20disable%20phone%2Fsms%20methods%20in%20the%20legacy%20mfa%20config%20screen%20and%20the%20sspr%20config%20screen%2C%20users%20are%20still%20presented%20phone%2Fvoice%20and%20sms%20options%20in%20the%20converged-interrupt%20registration%20screen.%20Will%20the%20methods%20presented%20be%20configurable%3F%20And%20will%20it%20permit%20discreet%20selection%20of%20phone%2Fvoice%20versus%20SMS%3F%20Thanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEDIT%3A%20ok%20-%20i%20take%20that%20back.%20Looks%20like%20it%20does%20honor%20the%20mfa%20and%2For%20sspr%20auth%20methods%20config.%20Not%20sure%20which%20yet.%20but%20it%20looks%20like%20it%20can%20take%2010-15%20minutes%20before%20config%20changes%20become%20effective.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1002559%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1002559%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3BIs%20there%20any%20GA%20date%20yet%3F%20In%20August%20you%20said%20%22the%20next%20few%20months%22.%3C%2FP%3E%3CP%3EMost%20of%20our%2043%2C000%20users%20have%20SSPR%2C%20but%20not%20MFA%20yet%20-%20it%20would%20be%20good%20to%20know%20when%20we%20expect%20this%20to%20ship%20and%20if%20we%20can%20enable%20in%20our%20time%20scales%20or%20whether%20it%20will%20just%20become%20the%20new%20default%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1003288%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1003288%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F294862%22%20target%3D%22_blank%22%3E%40watersjeremy%3C%2FA%3E%26nbsp%3Bit%20does%20take%20some%20time%20for%20settings%20to%20take%20affect.%20also%20keep%20in%20mind%20that%20admins%20have%20a%20different%2C%20hardcoded%20policy%20for%20SSPR%20set%20by%20Microsoft.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F235574%22%20target%3D%22_blank%22%3E%40Anthony%20Cotton%3C%2FA%3E%26nbsp%3Bapologies%20-%20we%20have%20had%20some%20delays%20in%20the%20GA%20date%20and%20it%20will%20not%20be%20until%20next%20year.%20It%20will%20continue%20to%20be%20opt-in%20at%20GA%20and%20we%20will%20give%20you%20ample%20heads%20up%20about%20the%20deprecation%20of%20the%20old%20SSPR%20and%20MFA%20pages.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1061471%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1061471%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20cloud%20app%20does%20this%20feature%20relate%20to%3F%20We%20block%20all%20cloud%20apps%20from%20being%20executed%20outside%20a%20certain%20environment%20and%20are%20looking%20to%20loosing%20the%20restriction%20for%20this%20app.%20However%20when%20we%20attempt%20to%20it%20is%20blocked%20by%20the%20more%20restrictive%20policy%20scoped%20to%20all%20cloud%20apps.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1064825%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1064825%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20Mac%20OS%2010.15.2%20and%20iOS%2013.3%20they've%20now%20officially%20released%20support%20for%20%3CSPAN%3EWebAuthn.%20How%20soon%20before%20the%20new%20auth%2Fregistration%20process%20will%20allow%20us%20to%20use%20Security%20Keys%20with%20Safari%20on%20a%20mac%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1078438%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1078438%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I'm%20trying%20to%20add%20the%20authenticator%20app%20as%20one%20of%20my%20security%20verification%20methods%20but%20when%20I%20click%20on%20the%20Security%20Info%20tab%20in%20my%20signing%2C%20it%20buffers%20for%20a%20little%20while%20and%20then%20shows%20-%20an%20unexpected%20error%20has%20occured.%20Please%20help%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F162933i9CCD18801D23E3F4%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Screenshot%202019-12-23%20at%2011.43.40.png%22%20title%3D%22Screenshot%202019-12-23%20at%2011.43.40.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085492%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085492%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F496886%22%20target%3D%22_blank%22%3E%40Matt3691%3C%2FA%3E%26nbsp%3B-%20is%20this%20with%20Edge%3F%20We%20get%20this%20for%20some%20users.%20Try%20Chrome%20or%20Firefox.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1095059%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1095059%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F496886%22%20target%3D%22_blank%22%3E%40Matt3691%3C%2FA%3E%26nbsp%3BThanks%20for%20letting%20me%20know%20-%20I'm%20not%20aware%20of%20any%20known%20issues%20around%20this%2C%20but%20I%20would%20recommend%20that%20you%20reach%20out%20to%20support%20for%20additional%20assistance.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1142643%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1142643%22%20slang%3D%22en-US%22%3E%3CP%3EMy%20org%20is%20just%20getting%20around%20to%20enabling%20password%20self%20service%20reset%20and%20we%20are%20disappointed%20that%20MFA%20can%20not%20be%20one%20of%20two%20%3CSTRONG%3Erequired%3C%2FSTRONG%3E%20items.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPersonal%20Emails%20are%20not%20secure%20at%20all%20so%20thats%20out%2C%20Office%20Numbers%20are%20useless%20as%20half%20my%20staff%20are%20not%20in%20an%20office.%20Mobile%20Number%20isnt%20great%20as%20if%20I%20steal%20the%20phone%20I%20can%20just%20answer%20it%2C%20but%20with%20MFA%20behind%20it%20I%20could%20be%20ok%20with%20that.%20Same%20with%20Security%20Questions%2C%20are%20to%20easily%20researched%20%2F%20guessed%20but%20again%20if%20I%20could%20require%20MFA%20then%20I%20would%20be%20ok%20with%20it.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20so%20perplexed%20why%20we%20cant%20save%20this%20configuration%20(see%20screenshot%20below).%20Instead%20the%20UI%20forces%20you%20to%20have%20enough%20other%20options%20that%20MFA%20can%20be%20skipped.%20Stating%20instead%20that%20%22%3CSPAN%3E%3CSTRONG%3EYou%20must%20enable%20another%20method%20to%20use%20mobile%20app%20or%20hardware%20token%20code%3C%2FSTRONG%3E%22.%20This%20in%20my%20opinion%20is%20extremely%20short%20sighted.%20I%20get%20it%2C%20you%20dont%20want%20to%20make%20it%20so%20end%20users%20get%20into%20situations%20where%20they%20dont%20have%20MFA%20and%20cant%20reset%20thier%20passwords.%20I%20say%20tough%20for%20them%2C%20they%20will%20have%20to%20call%20the%20helpdesk%20instead.%20Let%20customers%20decide%20if%20they%20want%20that%20or%20not%2C%20reducing%20security%20so%20you%20dont%20have%20to%20explain%20the%20nuance%20isn't%20right.%20As%20it%20stands%20right%20now%20I%20dont%20think%20we%20can%20use%20this%20feature%20and%20that%20is%20very%20upsetting.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAlso%20just%20a%20side%20note%2C%20%22personal%20email%22%20its%20VERY%20unclear%20where%20users%20set%20that%20up%2C%20where%20an%20IT%20admin%20can%20see%20them%2C%20and%20most%20importantly%20shouldnt%20they%20be%20in%20the%20area%20where%20other%20authenticator%20options%20are%20set%20(like%20security%20questions%20and%20MFA)%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F168273i41A7BF6824457088%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_0.png%22%20title%3D%22clipboard_image_0.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20that%20aside%2C%20I%20think%20you%20guys%20are%20knocking%20stuff%20out%20of%20the%20park%2C%20hopefully%20you%20will%20consider%20adjusting%20this%20to%20allow%20for%20MFA%20as%20a%20requirement.%20OR%20how%20about%20leaving%20it%20that%20other%20items%20must%20be%20required%20BUT%20a%20checkbox%20that%20says%20MFA%20needs%20to%20be%20one%20of%20them%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-Eric%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1144281%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1144281%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F454172%22%20target%3D%22_blank%22%3E%40ITEric%3C%2FA%3E%26nbsp%3Bthanks%20for%20the%20feedback!%20I%20understand%20the%20frustration%20and%20we%20are%20moving%20towards%20changing%20this%20requirement%20soon.%20The%20reason%20for%20this%20requirement%20is%20that%20users%20who%20are%20on%20the%20old%20SSPR%20registration%20experience%20could%20get%20stuck%20if%20their%20admin%20doesn't%20enable%20enough%20methods%20since%20app%2Fcode%20are%20not%20available%20to%20register%20on%20the%20old%20page.%20However%2C%20this%20will%20be%20changed%20soon.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1144423%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1144423%22%20slang%3D%22en-US%22%3E%3CP%3EThats%20great%20news%2C%20happy%20to%20beta%20test%20if%20you%20need.%20%3AD%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1177659%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1177659%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%40Sadie%20Henry%3C%2FA%3E%26nbsp%3B%2C%20great%20work%20on%20the%20combined%20registration.%20We're%20currently%20planning%20on%20rolling%20out%20MFA%20and%20SSPR%20in%20our%20organization%20and%20the%20combined%20registration%20is%20an%20nice%20improvment.%20Unfortunately%20we're%20experiencing%20the%20%22An%20unexpected%20error%20has%20occurred%22%20problem%20for%20all%20our%20Guest%20Users.%20It's%20not%20related%20to%20a%20browser%20issue%20or%20anything%20else.%20I%20have%20the%20same%20user%20and%20when%20I%20mark%20him%20as%20internal%20member%20he%20can%20succesfully%20register%2C%20wenn%20I%20mark%20the%20same%20user%20as%20a%20guest%20user%2C%20he%20can%20not%20register%20and%20get's%20the%20%22An%20unexpected%20error%20has%20occurred%22.%20In%20the%20Sign-ins%20Log%20there%20is%20an%26nbsp%3BSign-in%20error%20code%26nbsp%3B%3CSPAN%3E50072%3A%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EUsers'%20needs%20to%20enroll%20for%20second%20factor%20authentication%20(interactive).%20That's%20a%20bit%20funny%2C%20'cause%20that's%20what%20he%20is%20trying.%20Any%20thoughts%20on%20that%3F%20How%20did%20the%20other%20solve%20that%20Problem%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1235228%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1235228%22%20slang%3D%22en-US%22%3E%3CP%3Eis%20the%20preview%20functionality%20in%20a%20working%20state%2C%20please%3F%20we've%20been%20getting%20this%20result%3A%20%3CA%20href%3D%22https%3A%2F%2Fcl.ly%2Ff458841656a1%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcl.ly%2Ff458841656a1%3C%2FA%3E%20after%20successfully%20completing%20the%20new%20combined%20enrollment%20wizard.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1248350%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1248350%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F305564%22%20target%3D%22_blank%22%3E%40jurajt%3C%2FA%3E%20-%20Sorry%20to%20hear%20that.%20Could%20you%20DM%20me%20with%20more%20info%20so%20we%20can%20investigate%3F%20We're%20currently%20working%20on%20getting%20this%20flow%20to%20GA%2C%20but%20it%20has%20unfortunately%20been%20delayed%20due%20to%20coronavirus%20related%20issues.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1249532%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1249532%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3Bthx%20for%20the%20offer%20-%20i%20already%20engaged%20support%20-%20currently%20waiting%20for%20the%20update%20(it's%20been%20a%20couple%20days%20already%20%3A%2F).%20can%20send%20over%20the%20incident%20number%2C%20if%20you're%20interested%20in%20keeping%20tabs%20on%20it%20-%20just%20let%20me%20know.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1262590%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1262590%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20just%20want%20to%20say%20I'm%20very%20happy%20with%20the%20new%20way%20of%20going%20with%20this%2C%20I've%20setup%20a%20few%20clients%20with%20MFA%2FSSPR%20now%20and%20this%20will%20most%20probably%20remove%20most%20of%20the%20extra%20support%20I%20had%20to%20give%20users%20due%20to%20having%20two%20registration%20endpoint%20and%20different%20settings%20between%20them.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20just%20enable%20this%20for%20our%20environment%20because%20I'm%20doing%20another%20setup%20for%20just%20over%201000%20users%20and%20definitely%20want%20to%20go%20down%20this%20route%20if%20I%20can.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMost%20of%20it%20seems%20to%20work%20for%20me%20but%20for%20some%20reason%20I%20just%20can't%20get%20the%20CA%20policy%20to%20work%2C%20I've%20got%20a%20fair%20amount%20of%20experience%20with%20CA's%20and%20the%20instructions%20on%20MS%20site%20for%20this%20is%20a%20very%20limited%20CA%20policy%20with%20minimal%20config.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20I've%20created%20a%20group%20that%20currently%20target%202%20accounts%20(user%20%26amp%3B%20admin)%3C%2FP%3E%3CP%3E2.%20Done%20the%20pre-req%20(Preview)%3C%2FP%3E%3CP%3E3.%20Exclude%20the%20group%20from%20IP%20MFA%20Registration%20policy%3C%2FP%3E%3CP%3E4.%20Disabled%20SSPR%20Registration%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20check%20what-if%20for%20both%20accounts%20and%20its%20showing%20the%20policy%20will%20not%20apply%20due%20to%20the%20%22Cloud%20Apps%22%20settings%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22DanR456_0-1585498047766.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F180337i6B925FBB6AB1A177%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22DanR456_0-1585498047766.png%22%20alt%3D%22DanR456_0-1585498047766.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EIts%20shewing%20this%20in%20CA%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22DanR456_0-1585498328749.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F180338i6B35C9A62732F96F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22DanR456_0-1585498328749.png%22%20alt%3D%22DanR456_0-1585498328749.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20running%20out%20of%20ideas...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1358472%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1358472%22%20slang%3D%22en-US%22%3E%3CP%3EAny%20known%20fixes%20for%20the%20%22An%20unexpected%20error%20has%20occurred%22%20message%3F%20Seeing%20this%20on%20my%20very%20first%20test%20user%20does%20not%20bode%20well%20for%20rolling%20this%20out%20to%20pilot%2C%20let%20alone%20all%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1359099%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1359099%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F337274%22%20target%3D%22_blank%22%3E%40cmessina85%3C%2FA%3E%26nbsp%3B-%20Sorry%20to%20hear%20that.%20Could%20you%20DM%20me%20with%20more%20details%20about%20your%20setup%2C%20and%20at%20what%20point%20you%20saw%20that%20error%3F%20We'd%20be%20happy%20to%20help%20troubleshoot.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F599853%22%20target%3D%22_blank%22%3E%40DanR456%3C%2FA%3E%26nbsp%3B-%20Glad%20to%20hear%20you%20like%20the%20new%20experience!%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%20Are%20you%20still%20having%20issues%20with%20the%20CA%20policy%3F%20We%20just%20shipped%20the%20Conditional%20Access%20part%20to%20GA%20as%20well%20and%20the%20blog%20post%20is%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-active-directory-identity%2Fcombined-mfa-and-password-reset-registration-is-now-generally%2Fba-p%2F1257355%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-active-directory-identity%2Fcombined-mfa-and-password-reset-registration-is-now-generally%2Fba-p%2F1257355%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1359131%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1359131%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3B-%20Enabled%20SSPR%20for%20a%20few%20test%20users%20today%20and%20having%20the%20same%20issue%20of%20%E2%80%9Can%20unexpected%20error%20has%20occurred%E2%80%9D%20when%20navigating%20to%20the%20security%20info%20page.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1360319%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1360319%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F337274%22%20target%3D%22_blank%22%3E%40cmessina85%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESame%20here%20-%20it%20seems%20to%20have%20sorted%20itself%20out%20without%20making%20any%20changes%20-%20took%20almost%20a%20day.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1360528%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1360528%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F649360%22%20target%3D%22_blank%22%3E%40leewaythru%3C%2FA%3E%26nbsp%3BI%20just%20triggered%20the%20error%20again%20on%20the%20same%20account%20by%20clearing%20MFA%20registration%20from%20the%20user%20and%20forcing%20the%20user%20to%20go%20through%20the%20registration%20wizard%20again.%20Same%20as%20before%2C%20registration%20and%20MFA%20works%20but%20I%20can't%20get%20to%20the%20security%20info%20page.%20As%20long%20as%20it%20clears%20itself%20within%20a%20few%20hours%20it's%20still%20manageable%20for%20admins%2C%20but%20obviously%20users%20will%20not%20be%20able%20to%20self%20service%20on%20their%20own%20until%20this%20gets%20sorted%20out.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3Bdo%20you%20still%20want%20me%20to%20DM%20you%20with%20more%20detail%3F%26nbsp%3BI%20have%20a%20few%20dozen%20tenants%20and%20would%20like%20to%20feel%20better%20about%20offering%20this%20is%20as%20an%20MFA%20solution%20for%20users.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1360647%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1360647%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F337274%22%20target%3D%22_blank%22%3E%40cmessina85%3C%2FA%3E%26nbsp%3B-%20thanks%20for%20the%20info.%20I%20will%20test%20on%20our%20side%20as%20well.%26nbsp%3B%20Also%20in%20our%20case%20-%20when%20the%20issue%20started%20-%20it%20seem%20to%20affect%20all%20users%20e.g.%20even%20a%20test%20account%20for%20which%20I%20hadn't%20enabled%20SSPR%20-%20I%20was%20unable%20to%20access%20the%20Security%20info%20page.%3C%2FP%3E%3CP%3EDo%20you%20know%20if%20it%20was%20similar%20for%20you%3F%26nbsp%3B%20If%20you%20are%20able%20to%20recreate%20the%20issue%20by%20clearing%20the%20MFA%20registration%20for%20one%20user%20-%20is%20it%20only%20affecting%20that%20one%20user%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1360270%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1360270%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F649360%22%20target%3D%22_blank%22%3E%40leewaythru%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20checked%20again%20a%20few%20hours%20later%20and%20the%20user%20was%20able%20to%20load%20and%20use%20the%20security%20info%20page%20to%20make%20changes%20to%20their%20authentication%20methods.%20Did%20nothing%20except%20wait%20a%20few%20hours.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1384693%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1384693%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F337274%22%20target%3D%22_blank%22%3E%40cmessina85%3C%2FA%3E%26nbsp%3B%20and%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F649360%22%20target%3D%22_blank%22%3E%40leewaythru%3C%2FA%3E%26nbsp%3B-%20Yes%20unfortunately%20we%20were%20having%20a%20temporary%20issue%20with%20loading%20the%20security%20info%20page.%20The%20devs%20made%20a%20change%20so%20it%20should%20be%20fixed%20now%20though.%20Let%20me%20know%20if%20you%20run%20into%20it%20again.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1390580%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1390580%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22lia-message-author-avatar%20lia-component-author-avatar%20lia-component-message-view-widget-author-avatar%20UserAvatarWrapper%22%3E%3CDIV%20class%3D%22UserAvatarWrapper%22%3E%3CDIV%20class%3D%22UserAvatar%20lia-user-avatar%20lia-component-common-widget-user-avatar%20Microsoft%22%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3EThanks%20-%20I%20haven't%20seen%20the%20issue%20lately%20at%20all%20while%20still%20dev-testing.%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3ELike%20I'm%20also%20looking%20for%20a%20way%20to%20require%202%20methods%20for%20SSPR%20that%20do%20not%20include%20office%20phone%2C%20security%20questions%2C%20or%20personal%20email%2C%20but%20running%20into%20the%20message%20%22%3CSPAN%3E%22%3C%2FSPAN%3E%3CSPAN%3E%3CSTRONG%3EYou%20must%20enable%20another%20method%20to%20use%20mobile%20app%20or%20hardware%20token%20code%3C%2FSTRONG%3E%22.%20Currently%20trying%20to%20enable%20mobile%20app%20notification%2C%20mobile%20app%20code%2C%20and%20mobile%20phone.%20Is%20that%20the%20situation%20you%20said%20would%20be%20addressed%20or%20am%20I%20misunderstanding%20the%20situation%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-author-with-avatar%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1416173%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1416173%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%26nbsp%3Brunning%20through%20mysignins%20security%20page%20works%20ok%20on%20my%20iphone%20on%20Edge%2C%20chrome%20and%20also%20Safari%20but%20only%20in%20private%20mode.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20i%20run%20normal%20safari%20i%20get%20the%20error%20%22An%20unexpected%20error%20has%20occurred%22.%20Unfortunately%20iOS%20only%20have%20safari%20as%20default%20web%20browser%20for%20all%20links%20so%20sending%20it%20to%20an%20iphone%20user%20gives%20the%20above%20error%20but%20if%20they%20copy%20paste%20to%20either%20private%20or%20other%20browsers%20it%20works.%20What%20is%20this%20all%20about%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1483736%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1483736%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F187075%22%20target%3D%22_blank%22%3E%40Sadie%20Henry%3C%2FA%3E%20is%20there%20any%20update%20you%20can%20share%20on%20when%20the%20Authenticator%20app%20will%20count%20towards%20the%20SSPR%20methods%20we%20allow%20users%20to%20use%3F%20We%20are%20using%20the%20converged%20experience%20but%20still%20getting%20the%20%3CEM%3EYou%20must%20enable%20another%20method%20to%20use%20mobile%20app%26nbsp%3Bor%20hardware%20token%20code%26nbsp%3B%3C%2FEM%3Emessage%20when%20we%20try%20to%20require%202%20methods%20including%20the%20Authenticator%20app.%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1485320%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1485320%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F464408%22%20target%3D%22_blank%22%3E%40aidancopps%3C%2FA%3E%26nbsp%3Bas%20the%20Authenticator%20app%20provides%20both%20push%20and%20a%20code%20when%20registering%2C%20SSPR%20cannot%20have%20push%20and%20a%20code%20as%20two%20separate%20methods%20even%20if%20you%20use%20the%20code%20from%20a%20hardware%20token%20because%20the%20system%20does%20not%20equate%20which%20device%20it%20comes%20from.%20That%20is%2C%20once%20you%20do%20a%20push%20then%20any%20code%20is%20not%20an%20option%20and%20disappear%20from%20the%20reset%20wizard%20as%20otherwise%20there%20is%20nothing%20to%20stop%20you%20using%20the%20code%20from%20the%20authenticator%20app%20and%20thus%20not%20having%20two%20separate%20methods%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1487501%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1487501%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F157%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3BSorry%20my%20question%20wasn't%20that%20clear.%20I%20meant%20the%20system%20doesn't%20let%20us%20tick%20Authenticator%20Code%2C%20Authenticator%20Notification%20and%20another%20option%20such%20as%20Secret%20Questions%20-%20and%20then%20select%20to%20require%202%20methods.%20It%20sounds%20like%20it%20doesn't%20let%20you%20do%20this%20since%20the%20non-converged%20setup%20process%20doesn't%20let%20users%20configure%20the%20Authenticator%20app.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22SSPR.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F200870i60862515F8A72D87%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22SSPR.png%22%20alt%3D%22SSPR.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1528117%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1528117%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F337274%22%20target%3D%22_blank%22%3E%40cmessina85%3C%2FA%3E%26nbsp%3Band%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F464408%22%20target%3D%22_blank%22%3E%40aidancopps%3C%2FA%3E%26nbsp%3Band%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51179%22%20target%3D%22_blank%22%3E%40Brian%20Reid%3C%2FA%3E%26nbsp%3B-%20Thanks%20for%20reporting%20this!%20Unfortunately%20that%20error%26nbsp%3B%22You%20must%20enable%20another%20method%20to%20use%20mobile%20app%20or%20hardware%20token%20code%22%20is%20because%20of%20us%20supporting%20the%20old%20and%20new%20registration%20flows.%20The%20old%20SSPR%20registration%20flows%20don't%20support%20the%20Auth%20App%2C%20but%20the%20new%20flows%20do.%20So%20without%20that%20error%2C%20users%20could%20potentially%20land%20in%20the%20old%20flows%20and%20be%20required%20to%20register%20an%20Auth%20App%20even%20though%20the%20UX%20won't%20let%20them.%20We're%20discussing%20right%20now%20how%20to%20best%20fix%20this%20issue.%20We%20might%20just%20remove%20that%20error%20if%20all%20users%20in%20a%20tenant%20are%20enabled%20for%20the%20new%20Combined%20MFA%2FSSPR%20registration.%20That%20way%2C%20no%20user%20would%20land%20on%20the%20old%20flows.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354271%22%20slang%3D%22en-US%22%3ECool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354271%22%20slang%3D%22en-US%22%3E%3CP%3EHowdy%20folks!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EToday%2C%20I%20am%20excited%20to%20announce%20a%20set%20of%20fantastic%20enhancements%E2%80%94based%20on%20your%20feedback%E2%80%94to%20the%20public%20preview%20of%20our%20combined%20registration%20experience%20for%20Multi-Factor%20Authentication%20(MFA)%20and%20self-service%20password%20reset%20(SSPR).%20This%20new%20registration%20experience%20enables%20users%20to%20register%20for%20MFA%20and%20SSPR%20in%20a%20single%2C%20step-by-step%20process.%20When%20you%20deploy%20the%20preview%20experience%20for%20your%20organization%2C%20users%20can%20register%20in%20less%20time%20and%20with%20fewer%20hassles.%20In%20addition%2C%20the%20new%20My%20Profile%20experience%20provides%20users%20with%20a%20more%20streamlined%20and%20easier-to-navigate%20experience%20for%20reviewing%20and%20updating%20their%20profile%20info.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EKeep%20reading%20to%20learn%20more%20about%20these%20enhancements!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3EStreamlined%20registration%20experience%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3ESince%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FAzure-Active-Directory-Identity%2FCombined-registration-for-Azure-AD-MFA-and-Self-Service-Password%2Fba-p%2F245454%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Ewe%20released%20the%20combined%20registration%20public%20preview%3C%2FA%3E%2C%20we%20received%20a%20lot%20of%20great%20feedback%20from%20our%20customers%20on%20how%20to%20make%20this%20experience%20even%20better%20for%20their%20users.%20One%20of%20the%20most%20common%20pieces%20of%20feedback%20we%20received%20was%20that%20the%20registration%20experience%20needs%20to%20be%20even%20easier%2C%20especially%20on%20mobile%20devices.%20To%20address%20this%2C%20we%20streamlined%20the%20experience%20so%20that%20users%20can%20simply%20click%20through%20each%20step%20to%20register%20their%20security%20info.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%20when%20users%20are%20required%20to%20register%20while%20signing%20in%2C%20they%E2%80%99ll%20see%20the%20following%20experience%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Enhanced%20step-by-step%20registration%20experience.%22%20style%3D%22width%3A%20670px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F83788i688FD5BE5DB3BAA0%2Fimage-dimensions%2F670x376%3Fv%3D1.0%22%20width%3D%22670%22%20height%3D%22376%22%20title%3D%22registration%20experience.png%22%20alt%3D%22Enhanced%20step-by-step%20registration%20experience.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EEnhanced%20step-by-step%20registration%20experience.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EOnce%20a%20user%20completes%20registration%2C%20they%E2%80%99ll%20see%20an%20overview%20of%20what%20they%20registered%20to%20confirm%20the%20information%20is%20correct%20and%20then%20they%E2%80%99re%20back%20to%20work!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Overview%20of%20the%20security%20info%20setup%20by%20the%20user.%22%20style%3D%22width%3A%20676px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F83984iD7F0CED7D6E3310A%2Fimage-dimensions%2F676x370%3Fv%3D1.0%22%20width%3D%22676%22%20height%3D%22370%22%20title%3D%22Picture1.png%22%20alt%3D%22Overview%20of%20the%20security%20info%20setup%20by%20the%20user.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EOverview%20of%20the%20security%20info%20setup%20by%20the%20user.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3ETo%20learn%20more%20about%20the%20enhanced%20security%20info%20registration%20experience%2C%20check%20out%20our%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsecurityinfodocs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eadmin%20documentation%3C%2FA%3E%20and%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsecurityinfoguide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Euser%20documentation%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3ENew%20My%20Profile%20experience%3C%2FFONT%3E%3CBR%20%2F%3EWhen%20you%20enable%20the%20enhanced%20security%20info%20registration%20experience%20for%20your%20users%2C%20they%E2%80%99ll%20also%20have%20the%20new%20My%20Profile%20experience%2C%20now%20in%20public%20preview.%20My%20Profile%20is%20the%20central%20location%20where%20users%20manage%20their%20identity%20including%20security%20info%2C%20devices%2C%20and%20more.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22The%20new%20My%20Profile%20experience.%22%20style%3D%22width%3A%20701px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F83790iF93028F6BC11FFF6%2Fimage-dimensions%2F701x494%3Fv%3D1.0%22%20width%3D%22701%22%20height%3D%22494%22%20title%3D%22new%20profile%20experience.png%22%20alt%3D%22The%20new%20My%20Profile%20experience.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EThe%20new%20My%20Profile%20experience.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EFrom%20the%20Security%20info%20page%2C%20users%20can%20easily%20change%20their%20phone%20number%20or%20choose%20a%20different%20default%20method.%20From%20here%20they%20can%20also%20add%2C%20delete%2C%20or%20change%20a%20method.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Manage%20security%20info.%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F83985i83A22F76464EF309%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture2.png%22%20alt%3D%22Manage%20security%20info.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EManage%20security%20info.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3ETo%20learn%20more%20about%20the%20new%20My%20Profile%20experience%2C%20check%20out%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fmyprofiledocs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eour%20documentation%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3E%3CFONT%20size%3D%225%22%3ETry%20it%20out!%3C%2FFONT%3E%3CBR%20%2F%3ETo%20enable%20the%20enhanced%20security%20info%20registration%20experience%20and%20the%20new%20My%20Profile%20experience%20for%20your%20users%2C%20follow%20these%20steps%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ESign%20into%20the%20%3CSTRONG%3EAzure%20portal%3C%2FSTRONG%3E%20as%20a%20global%20administrator%20or%20user%20administrator.%3C%2FLI%3E%0A%3CLI%3EBrowse%20to%20%3CSTRONG%3EAzure%20Active%20Directory%20%26gt%3B%20User%20settings%20%26gt%3B%20Manage%20settings%3C%2FSTRONG%3E%20%3CSTRONG%3Efor%20access%20panel%20preview%20features%3C%2FSTRONG%3E.%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3EUnder%20%3CSTRONG%3EUsers%20you%20can%20use%20the%20preview%20features%20for%20registering%20and%20managing%20security%20info%20%E2%80%93%20refresh%3C%2FSTRONG%3E%2C%20you%20can%20choose%20to%20enable%20for%20a%20Selected%20group%20of%20users%20or%20for%20All%20users.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20664px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F83793i37CC54471C07D89D%2Fimage-dimensions%2F664x221%3Fv%3D1.0%22%20width%3D%22664%22%20height%3D%22221%22%20title%3D%22enhanced%20security%20info%20registration%20experience..png%22%20alt%3D%22Enable%20the%20enhanced%20security%20info%20registration%20experience.%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EEnable%20the%20enhanced%20security%20info%20registration%20experience.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EUsers%20who%20are%20enabled%20for%20the%20old%20security%20info%20registration%20experience%20will%20continue%20to%20see%20that%20experience%20until%20you%20enable%20them%20for%20the%20refreshed%20experience.%20This%20means%20that%20if%20you%20have%20enabled%20the%20non-refreshed%20experience%2C%20you%20will%20have%20the%20ability%20to%20enable%20and%20disable%20that%20experience.%20%3CBR%20%2F%3EIf%20a%20user%20is%20enabled%20for%20both%20the%20old%20experience%20and%20the%20enhanced%20experience%2C%20they%20will%20see%20the%20enhanced%20experience.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EAs%20we%20move%20forward%2C%20we%20will%20continue%20to%20make%20improvements%20and%20fixes%20in%20the%20enhanced%20registration%20experience.%20If%20your%20users%20are%20using%20the%20old%20experience%2C%20we%20recommend%20moving%20them%20to%20the%20enhanced%20experience%20as%20soon%20as%20possible%20so%20that%20they%20have%20access%20to%20the%20latest%20updates.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EPlease%20submit%20your%20ideas%20to%20our%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsspruservoice%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Efeedback%20forum%3C%2FA%3E%20and%20we%20will%20review%20and%20respond%20to%20them.%20You%20can%20also%20let%20us%20know%20what%20you%20think%20in%20the%20comments%20below.%20As%20always%2C%20we%E2%80%99d%20love%20to%20hear%20any%20feedback%20or%20suggestions%20you%20have.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20Regards%2C%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAlex%20Simons%20(%5B%23%24dp258%5D%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2FAlex_A_Simons%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%40Alex_A_Simons%3C%2FA%3E%26nbsp%3B)%3C%2FP%3E%0A%3CP%3ECorporate%20VP%20of%20Program%20Management%3C%2FP%3E%0A%3CP%3EMicrosoft%20Identity%20Division%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-354271%22%20slang%3D%22en-US%22%3E%3CP%3ENew%20registration%20experience%20enables%20users%20to%20register%20for%20MFA%20and%20SSPR%20in%20a%20single%2C%20step-by-step%20process.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22registration%20experience.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F83787iD4142D2EDDF78C87%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22registration%20experience.png%22%20alt%3D%22registration%20experience.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-354271%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EProduct%20Announcements%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1573099%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1573099%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F426704%22%20target%3D%22_blank%22%3E%40robynhicock%3C%2FA%3E%2C%20I%20hope%20all%20is%20well.%26nbsp%3B%20We%20too%20would%20like%20to%20see%20the%20back%20of%20the%26nbsp%3B%3CFONT%3E%22You%20must%20enable%20another%20method%20to%20use%20mobile%20app%20or%20hardware%20token%20code%22%3C%2FFONT%3E%20restriction.%26nbsp%3B%20In%20an%20ideal%20would%2C%20we%20would%20like%20to%20enforce%20the%20use%20of%26nbsp%3B%3CSPAN%3Esecurity%20questions%3C%2FSPAN%3E%20and%20token%20(RSA%20or%20MAA).%26nbsp%3B%20We%20don't%20want%20SMS%20or%20email%20to%20be%20an%20option%20for%20our%20users.%26nbsp%3B%20Do%20you%20have%20an%20indication%20of%20when%20this%20might%20be%20resolved%3F%26nbsp%3B%20We're%20at%20a%20critical%20point%20in%20deciding%20on%20our%20SSPR%20solution%20and%20we%20don't%20want%20to%20choose%20something%20non-Microsoft%20if%20we%20don't%20have%20to.%26nbsp%3B%20Thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1602934%22%20slang%3D%22en-US%22%3ERe%3A%20Cool%20enhancements%20to%20the%20Azure%20AD%20combined%20MFA%20and%20password%20reset%20registration%20experience%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1602934%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F752651%22%20target%3D%22_blank%22%3E%40andy247%3C%2FA%3E%26nbsp%3B-%20We%20can%20get%20rid%20of%20that%20SSPR%20restriction%20once%20more%20tenants%20are%20enabled%20for%20combined%20MFA%2FSSPR%20registration.%20We're%20automatically%20opting%20in%20all%20new%20tenants%20since%20August%2015th%2C%20and%20we'll%20start%20a%20roll%20out%20for%20existing%20tenants%20in%20September.%20Then%20we%20can%20remove%20that%20SSPR%20rule%20that%20requires%20another%20method%20to%20use%20the%20auth%20app.%3C%2FP%3E%3C%2FLINGO-BODY%3E

Howdy folks!

 

Today, I am excited to announce a set of fantastic enhancements—based on your feedback—to the public preview of our combined registration experience for Multi-Factor Authentication (MFA) and self-service password reset (SSPR). This new registration experience enables users to register for MFA and SSPR in a single, step-by-step process. When you deploy the preview experience for your organization, users can register in less time and with fewer hassles. In addition, the new My Profile experience provides users with a more streamlined and easier-to-navigate experience for reviewing and updating their profile info.

 

Keep reading to learn more about these enhancements!

 

Streamlined registration experience

Since we released the combined registration public preview, we received a lot of great feedback from our customers on how to make this experience even better for their users. One of the most common pieces of feedback we received was that the registration experience needs to be even easier, especially on mobile devices. To address this, we streamlined the experience so that users can simply click through each step to register their security info.

 

Now when users are required to register while signing in, they’ll see the following experience:

 

Enhanced step-by-step registration experience.Enhanced step-by-step registration experience.

Once a user completes registration, they’ll see an overview of what they registered to confirm the information is correct and then they’re back to work!

 

Overview of the security info setup by the user.Overview of the security info setup by the user.

To learn more about the enhanced security info registration experience, check out our admin documentation and user documentation.

 

New My Profile experience
When you enable the enhanced security info registration experience for your users, they’ll also have the new My Profile experience, now in public preview. My Profile is the central location where users manage their identity including security info, devices, and more.

 

The new My Profile experience.The new My Profile experience.

From the Security info page, users can easily change their phone number or choose a different default method. From here they can also add, delete, or change a method.

 

Manage security info.Manage security info.

To learn more about the new My Profile experience, check out our documentation.


Try it out!
To enable the enhanced security info registration experience and the new My Profile experience for your users, follow these steps:

 

  • Sign into the Azure portal as a global administrator or user administrator.
  • Browse to Azure Active Directory > User settings > Manage settings for access panel preview features
  • Under Users you can use the preview features for registering and managing security info – refresh, you can choose to enable for a Selected group of users or for All users.

    Enable the enhanced security info registration experience.Enable the enhanced security info registration experience.

Users who are enabled for the old security info registration experience will continue to see that experience until you enable them for the refreshed experience. This means that if you have enabled the non-refreshed experience, you will have the ability to enable and disable that experience.
If a user is enabled for both the old experience and the enhanced experience, they will see the enhanced experience.


As we move forward, we will continue to make improvements and fixes in the enhanced registration experience. If your users are using the old experience, we recommend moving them to the enhanced experience as soon as possible so that they have access to the latest updates.


Please submit your ideas to our feedback forum and we will review and respond to them. You can also let us know what you think in the comments below. As always, we’d love to hear any feedback or suggestions you have.

 

Best Regards, 

 

Alex Simons (@Alex_A_Simons )

Corporate VP of Program Management

Microsoft Identity Division

138 Comments

Hello

I used to have these options

mfa settings.png

 

 

 

 

 

 

The first option was set to All and this gave us the new experience, working up until today

The second option (enhanced) was set to None 

 

By switching to the new enhanced mode, what has happened is the first option has dissapeared !!!!

i only get option 2

 

Capture2.PNG

 

 

 

 

 

 

Now with the enhanced option set to ALL or selected group

When new users attempt to enroll a new android mobile device using company portal we end up with the follow messageError_SSPR_MFA.png

 

 

 

 

 

 

 

 

 

 

Now i cant switch back to what we had before so why is this happened?

Why we cant enroll mobile devices using the new enhanced option when it was working on the previous preview option

 

This is not good enough!

Microsoft

@Jonas Back I'd definitely like to dig into these issues with you further. Can you send me a DM and we can look into this?

 

@mackintoshc2019 We are removing the control for the old version of public preview, which is why you no longer see that option. I was unaware of any issues with device enrollment but I'm happy to dig into it. Can you also send me a DM and we can look into this?

Occasional Visitor

Looking for conditional access on MFA registration as well!!

 

Is there a way to control who is allowed to use which options? GroupA can use Phone or App, GroupB only use App for MFA?

Microsoft

@Andrew_Christianson No, not yet, but we are working on both of those capabilities. :)

@Sadie Henry are you saying that currently the enrollment doesnt work if Conditional Access are in place when the user attempts to log in and register, i have  CA policy in place that requires MFA  when a user attempts to enroll a mobile phone, so if it is first time they will be asked to register for MFA otherwise if they have already regsitered for MFA then they will be asked to provide their second factor.

 

This was working perfectly on teh OLD Preview settinsg and still works on non preview settings, just nothing in the new preview settings

@Sadie Henry 

Hello 

I was doing some additional testing and found that the Enhanced Preview settings do work for enrolment via a Windows 10 device, i get requested to setup MFA via conditional Access Policy and then setup completes ok.

 

The problem i am seeing appears to be specifically with Android Mobile and Company Portal, i suspect the Company Portal cant handle the new preview settings and i get an unexpected error has occurred.

 

Can this be verified if this is a known issue at all.

Microsoft

@mackintoshc2019 could you send me a DM so that we can follow up via email? It would be great to get more details on this. Thanks!

Senior Member

The new one is getting better.  A few notes.

1. the direction, it says to enable the "Users who can use the preview features for registering and managing security info – refresh" version, but in my tenant it says "Users can use preview features for registering and managing security info – enhanced"  

2. Security Questions for SSPR are truncated by popup box and you cannot read the entire question. 

3. How do you know what options are for SSPR and which are for MFA? Can you add a column or comment to let the end users know that security questions or email is not available for MFA

Senior Member

We are currently using this new experience to enrol our users.

The feedback we get from our users is that when the have to enter their private/personal e-mail address for example ..@Hotmail.com or …@gmail.com, they enter their work/school e-mail address and this doesn’t work off course.

 

So please change description to make it more clear for users that they have to enter a personal e-mail address.

temp.png

 

 

Microsoft

@Eric Kurtz thanks for the feedback!

 

  1. Yes, the title has change slightly. We'll update our documentation. :)
  2. Can you private message me a screenshot of the security questions issue?
  3. We don't indicate to the users which methods are used for what as we haven't found that user's are looking for that info. Have your users run into issues with this?

Thanks!

Microsoft

@niels haaijer thanks for the feedback! We'll look into making this clearer for users. 

Hi @Sadie Henry - Recent Activity was on this portal when you released the feature for preview, but it is not there anymore. Can you share something on why this was removed and when you expect it to return please?

Thanks



Senior Member

@Brian Reid  you can still access the recent activity using this link https://mysignins.microsoft.com/

Microsoft

@Brian Reid great question! Shoot me a DM and I'd be happy to discuss further. :)

Visitor
First, I like the trend that things are moving towards Azure AD and look forward to all MFA config to happen there in a consistent manner. Today it is too spread out in different portals. I would like to try this new experience out and have enabled the preview. I then created a Conditional Access Policy in Azure AD that requires MFA for a user. When he logs on, the browser thinks for a few seconds, and then there is just a page with a triangle and a few exclamation marks that says "An unexpected error occured" (or something like that in english, I am Swedish so it says the error in Swedish). @Sadie Henry Something is clearly broken with this new preview MFA experience, is there an ETA on when it will actually work?
Microsoft

Hi @Henrik_-_CD  - I would love to learn more about the issue you're running into. I'm not aware of any issues that would cause that behavior. Can you send me a direct message and we can dig into the issue?

Senior Member

Removed .. Double post

Senior Member

Removed .. Double post

Senior Member

Hello @Sadie Henry! I have changed to a more permanent persona for this forum. I have been testing this out more and have found this:

 

If I require a user to re-enroll MFA, the enrollment for this user breaks with an "An unknown error occurred" error. If I wait to the next day however, the enrollment for the user have self-healed and works again!? This is repeatable over days and the error is consistent.
 
If I go to the security settings for a user after the enrollment (see point 1), it's broken again and shows just the triangle and exclamation marks and "Unknown error" message.
 
When I configure the MFA methods in the SSPR area, I have to require two methods to even light up the choice to use the app notifications. I am then for some reason forced to choose three methods when requiring only two. Also, I am offered to configure app codes even if this is not chosen in the SSPR methods but is however allowed in the old portal, is this to be expected?
 
Why are the settings for MFA methods located in the SSPR settings? If the same settings are for both things, they should be consolidated somewhere more logical. "Where do I configure the MFA settings? In the SSPR area whether SSPR is configured or not! Eh ok?". Also, the fact that MFA settings are available in both the old portal and the new without any clear info on the correlation between the two does not exactly help. A more fine-grained setup would also be great, where you can choose different MFA methods and requirements for different users in a broader framework regarding login security for a user.
 
Listen, I get that you are trying to simplify this setup for the users which is great. But as of right now, it does not work. If I was to release this in our live environment it would be disaster with the errors that occur. I would be interested in getting this to work properly, do contact me if you want additional feedback.
Senior Member

@Sadie Henry We are also seeing the "unexpected error has occurred" under certain circumstances.

 

With IE protected mode disabled for trusted sites...

Using Edge or Firefox in private mode, accessing aka.ms/mfasetup and signing in, we are given the "unexpected error has occurred"

Using IE in private mode, isn't really private.  Trying to use an account other than the one signed into Windows, ultimately reverts back to the Windows signed in user.

Senior Member

Indeed there is a problem with this. I hope they will fix it as I truly like the new look of it. :)

Senior Member

@Sadie Henry @Jonas Back I am seeing the same experience when scanning a QR code for Authenticator just spins forever and the push never goes through to the end device.

 

In addition, I think the current flow is a bit illogical.  

 

When a new user first logs in and goes through the MFA registration, the default method is via TOTP code using the Authenticator app.  In order to configure push notifications, they have to re-register a second time leaving two authenticators in the app which is extremely confusing.  How do you configure it so they register only once with the default method being push?  

Senior Member

@Sadie Henry @Jonas Back 

 

I have seen the same spinning while trying to authenticate using push notification this method when the user is using an Android device.

 

I also believe there is a workflow issue as well when logging into the account for the first time. Upon initial MFA registration, you are prompted to use "In your app, add an account and select "Other".  This should default to the work or school method so the user can register for push notification immediately upon registration.   Can we modify this?  

XaMw2hYeFv.png

Microsoft

@HenrikEl Thanks for all of your feedback! We are looking into the bugs that you mentioned around clearing MFA and getting an error when you try to access the registration page. We are also working to bring the administrative experience for MFA and SSPR together so that it's easy and clear how to configure methods for a user. This will make things much simpler and clearer. :)

 

@Andy-H We're also looking into this. This is currently a known issue and we are working to fix it.

 

@JB_MG You are seeing the flow that happens when only mobile app code is enabled for the user. If you're registering using mobile app code, the account you have to select is "Other".

 

Thanks, folks!

Senior Member

@Sadie HenrySimilar but different to @HenrikEl , if a user deletes all instances of their registered Authenticator apps, and tries to re-enroll, the web pages just loop back and forth.  I had created a case with MS and was told that the web page looping is by design!

 

As an aside, we really need a way to differentiate the different authenticator apps within a user's profile so they don't delete all or the wrong one.

Microsoft

@Andy-H I'll look into the looping issue for you. If the user registers Microsoft Authenticator, we will show the device name if we are able to retrieve it, which differentiates the apps. Feel free to shoot me a DM and we can discuss further.

New Contributor

Hi @Sadie Henry - as we've rolled this out to all our staff, I've had an interesting problem popup that I was able to recreate on a test account - apologies if this has already been reported!

 

The problem is that if a user chooses to use their Phone as the first method, and then on the second method they want to use email, they must do that there and then. If for whatever reason they don't complete the process (such as it timing out), then when they return to the setup page, "Phone" has moved to being the second method, and the first option doesn't let you choose "I want to set up a different method" anymore:

 

Method problem.png

Microsoft

@Ben Watt thanks for notifying me of this! I'd like to understand more about your MFA and SSPR policies to troubleshoot what's going on. Can you send me a DM with the info?

@Sadie Henry just noticed that when I have this UX enabled and I login to a new device as a Azure AD user I get asked to set up a PIN. If I choose to defer this for 14 days it ignores me and I need to complete the new wizard. The PIN UI is square in Windows 10 (1809) but the combined wizard is not square, so it does not fit well on the screen and then at the end of adding a new authenticator and phone number it presents me with the Myapps portal - but I am inside the PIN UI in Windows. I've uploaded a photo so you can see what it looks like below, and then it fails to register the pin if I close that UX with the cross top right (there is no other way out anyway). PIN registration then works if you choose Try Again in the error page, as this time I don't need to register but just enter the authenticator codePIN UI with combination wizardPIN UI with combination wizard

 

PIN setup error afterwardsPIN setup error afterwards

 

@Sadie Henry - Hi, tried to register a few people into this feature when using an iPad. But in both Safari and Chrome it would not show the QRCode and only the code to enter by hand and the URL, which is quite hard to type by hand. Any idea why iPad's are not showing the QRCode?IMG_20190621_140026.jpg

 

 

Thanks

 

Brian

Microsoft

@Brian Reid - What's happening is that we're detecting you're on a mobile device and we assume it's the same mobile device that the app is on. Thus, we're not showing the QR code and we're giving you the copy/paste option instead. Does that clarify?

Microsoft

@Brian Reid - can you send me a DM about the PIN issue? PIN registration is separate from the combined experience, so I'm not sure what's going on there. 

OK @Sadie Henry - regards the lack of QR code - for one of my clients, the iPad is the end users computing device and the phone is the second factor - the iPad itself, though mobile, is treated like a laptop. Therefore it would be useful if we could have the reverse of the "can't scan image" option (which gives us codes to enter/copy+paste, and have a "show QR code" so that we can scan something when the above and similar scenarios are met.

Deleted
Not applicable

Hi there, I'm not sure if this has been addressed already, but I just signed up for a preview of the new experience. Upon enabling a test user with MFA, it only made me set up the authenticator app. Is there any way to force users to sign up at least one more authentication method, such as a phone number?

 

Thanks in advance.

Do you have phone enabled in the MFA cloud settings area of the admin portal? 

Frequent Visitor

Yes, all types are enabled. I see here: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Cool-enhancements-to-the-Azur... that there's the "two methods" at the top. I don't see any of that.

Microsoft

Folks - apologies for the delayed response! I just returned from being out of town. :)

 

@Brian Reid - that's a great suggestion. I will look into this with my team.

 

@Derek_Jew - if you require two methods for SSPR, the user will be required to register two methods. 

Senior Member
We are also running into the "An Unexpected error has occurred" issue as mentioned in several post. We've tried adjusting the IE security settings as suggest but this issue still occurs. Has a true solution to this issue been found?
Regular Visitor

Hi,

 

I've not reviewed all of the comments, so sorry if I'm doubling up. Firstly, the new experience is a massive improvement, and I'm training it as part of trailing the support for Security Keys.

 

One thing I've noticed is you appear to need to allow third party cookies, and/or disable the 'prevent cross-site tracking' features in the browser to work. Is this because it is a preview release, or is this related to the cookies not working across different domains?

 

James

Senior Member

What is the timeline for this to be GA?  We would like to get this turned on before the start of school so the students have a better experience. 

 

Microsoft

James - glad to hear that you're liking the new experience! The issue you mentioned is a known issue that we're working to address now. You can expect a fix to be rolled out soon. :)

 

Eric - we're targeting GA in the next few months.

Senior Member
We are getting the following prompt today for some - but not all - users trying to register for MFA via aka.ms/setupsecurityinfo "The selected account does not exist in client "Microsoft" and cannot access the application "6d544468-7fef-481a-9bdf-f2314ee734fe" in that client. The account has to be added as external user in that client first. Please use another account" Are there currently changes being made?
Occasional Contributor
@Sadie Henry - Thanks for providing lots of great feedback on this capability. We are hoping to role the combined MFA/SSPR experience out to our entire organiztion starting in a fews but are running into the "an unexpected erro has occured" issue that has been mentioned several times in the comments. Do you have any feedback on when this might be resolved and/or work arounds?
Frequent Visitor

Is there a way to change which registration method is 'default'? Meaning, does the App need to be the first to attempt to register the user? We've enabled the application method for users, but most are using the Phone method and we want that to show first as an option during registration instead of mobile app.  Otherwise we need to instruct most of users to go to the 'I want to setup a different method' twice , once for each authentication method they need to setup where it defaults to trying to push the Mobile app first. 

clipboard_image_0.png

@Mattk623 - if you disable the app option in both MFA and SSPR then you will get phone first. Your default is the first option you register with. You can only change your default after you register. 

 

Out of interest though, why are they using phone as first preference? 

Frequent Visitor

@Brian Reid Thanks for the quick response. I guess we were hoping to keep the app option for those that use it just not make it the first one that comes up on registration, but instead make the phone (text) registration be the first one, so I was hoping not to disable the app option all together.

 

Can you confirm your question of why they are using phone as first preference? As opposed to the app? We have about 1100 users registered so far, and 90% of them have asked to use a text code instead of the app - we tried to push the app as the 'recommended' option but too many users didn't want to download an app or thought it was too complicated. Does that answer what you were asking?

 

Frequent Visitor

FYI: We are also running into the 'an unexpected error has occurred' error on some users

@Mattk623 yes, that's the aim of the question - so a second question if you don't mind - I can see users thinking the app code is harder than SMS, but what about push notifications where they need to do next to nothing at all?

 

@Sadie Henry it would be great if Microsoft where to include an admin driven default as I discovered when writing https://c7solutions.com/2019/08/MFA-and-end-user-impacts that the different wizards have different defaults and it changes based on what methods are allowed as well. 

Frequent Visitor

@Brian Reid I agree for me personally - however the 'go to the app store and download an application' was where a lot of sadly users threw up their hands ;) . We're having to deploy FOBs for a handful of users who were even afraid of getting a text message. 

 

 

Microsoft

@Brian Reid @Mattk623 Thank you for your feedback! This is definitely something we've considered and we'll continue to look into it. Because the Microsoft Authenticator app option is more secure than phone, we do want to do everything we can to push users towards that option. We're working on making that flow even easier for users.