Force Users to Register more than one MFA Method

%3CLINGO-SUB%20id%3D%22lingo-sub-1256555%22%20slang%3D%22en-US%22%3ERe%3A%20Force%20Users%20to%20Register%20more%20than%20one%20MFA%20Method%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1256555%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20your%20users%20are%20taken%20to%20the%20registration%20portal%2C%20they%20will%20need%20to%20provide%20at%20minimum%20the%20number%20of%20methods%20you%20are%20requiring%20for%20a%20SSPR.%20Refer%20to%20this%20diagram%20and%20the%20documentation%20for%20more%20details%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcept-registration-mfa-sspr-combined%23interrupt-mode%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcept-registration-mfa-sspr-combined%23interrupt-mode%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1290056%22%20slang%3D%22en-US%22%3ERe%3A%20Force%20Users%20to%20Register%20more%20than%20one%20MFA%20Method%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1290056%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BI%20should%20have%20clarified%20that%20we%20are%20using%20ADConnect%20with%20PHS%20and%20password%20writeback%20disabled%20so%20SSPR%20is%20not%20an%20option%20for%20most%20of%20our%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1290905%22%20slang%3D%22en-US%22%3ERe%3A%20Force%20Users%20to%20Register%20more%20than%20one%20MFA%20Method%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1290905%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20now%20have%20%22converged%22%20registration%20for%20bot%20SSPR%2FMFA%2C%20so%20when%20I%20refer%20to%20SSPR%20above%20it%20also%20applies%20to%20registering%20for%20MFA.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1255009%22%20slang%3D%22en-US%22%3EForce%20Users%20to%20Register%20more%20than%20one%20MFA%20Method%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1255009%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20possible%20to%20enforce%20that%20users%20register%20more%20than%20one%20MFA%20method%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1255009%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAccess%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

Is it possible to enforce that users register more than one MFA method? 

3 Replies

When your users are taken to the registration portal, they will need to provide at minimum the number of methods you are requiring for a SSPR. Refer to this diagram and the documentation for more details: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr...

@Vasil Michev I should have clarified that we are using ADConnect with PHS and password writeback disabled so SSPR is not an option for most of our users.

We now have "converged" registration for bot SSPR/MFA, so when I refer to SSPR above it also applies to registering for MFA.