Microsoft Authenticator app—now sends security notifications
Published Feb 04 2019 09:00 AM 27.1K Views

Howdy folks,

 

I'm excited to share with you that starting today, we will help you have more confidence and visibility into your personal Microsoft account activities by giving you security notifications delivered in the Microsoft Authenticator app.

 

When important events—such as a password change—happen on your personal Microsoft account, Microsoft Authenticator will send you a notification. You can then view your account activity and take actions to protect your account if needed. The goal of these notifications is to increase awareness and help you react quickly if there is unexpected activity.

 

To receive these security notifications just download the Microsoft Authenticator app. (Make sure you’re running the latest version available in the App Store.) Then set up your personal Microsoft account on the Microsoft Authenticator app.

 

You’ll automatically start receiving alerts when we detect sensitive or unusual actions on your account, such as changing your password, adding a new phone number or email addresses, or signing in from a new device or unusual location. These notifications give you a powerful tool to understand and keep control of your account.

Auth app 1.png

If you receive a notification that you’re concerned about, you can quickly view your account activity and take necessary actions to protect your account. This may include changing your password or updating your security contact information.

 

Auth app 2 V2.png

 

If you have additional questions, check out our FAQs.  Let us know what you think in the comments below. As always, we’d love to hear any feedback or suggestions you have.

 

Best regards,

 

Alex Simons (@Alex_A_Simons )

Corporate VP of Program Management

Microsoft Identity Division

17 Comments
Copper Contributor

Quick question: Very helpful feature update! Will we also get notified on Password Reset (e.g. using SSPR)?

Brass Contributor

I think this feature is useful even for 'Work or School Account' holders. Do you have any plan to deploy this feature to them?

Thank you.

Steel Contributor

Awesome! Hope to see this functionality for ‘Work accounts’ in Azure AD too.

Steel Contributor

Awesome. Hope to see this for Work Accounts in Azure AD too.

Iron Contributor

I am going to echo @Jonas Back as he said it twice, Please make this available ASAP for Work Accounts using Azure AD if it is not already the case! Great update!

Microsoft

@Sunil Kumar Chauhan You'll get notified when you reset your password for your personal Microsoft account. For AAD accounts, we're working on bringing the account activity page to public preview, and then we'll start working on notifications. SSPR seems like a great scenario to have notifications.

Microsoft

Takuya, Rob, Jonas, and anyone else who has this question - Yes, we do want to have this feature for AAD accounts too someday. Right now, we're working on bringing the AAD Account Activity page to public preview. Then, we'll start working on account activity notifications.

 

Copper Contributor

Greetings Microsoft'ers,

 

I would like to bring to your attention a trouble-shooting issue that I encountered during the installation of the MS Authenticator app on the iPhone. After downloading the MS Authenticator app, I have noticed some synchronization issues. Thus the QR code does not automatically get emailed to the registered MS Office 365 account. I would like further pointers towards receiving the code and URL. I attempted to utilize the link and code within the MS Authenticator blog, but the link must be expired. Thanks a ton and happy testing! =^.^=

 

Kind Regards,

ComputerWiz

Microsoft

Hi ComputerWhiz,

 

Sorry for your difficulty. Can you clarify what type of account (personal Microsoft, work/school Microsoft, or Other) you were trying to add? Where did you find the QR code? 

Copper Contributor

@Olena Huang That is ok. I am very good with bypassing certain methods of authentication, but I figured following the instructions would be best. I am attempting to set up a Work or school account. I am a web developer for Walden University. I have yet to receive a QR scan code from the administrator of from Microsoft registered account via email. Thus, the QR scan code is not valid acquired from Microsoft Blog website here. I hope that this information may assist you. Looking forward to your response. Also, thanks for your quick reply! Thanks for your time and happy testing.

 

Kind Regards, 

ComputerWiz

Microsoft

Hi ComputerWiz,

 

The QR code from the Microsoft website you referenced (https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-auth-app-add-work-school...) isn't valid and is just for documentation purposes. For a valid QR code, you need an Azure AD account. Do you have an existing work/school Microsoft account?

Copper Contributor

Hi @Olena Huang,

 

To be clear, I know that the QR code listed on the website had expired after attempting to utilize the code an URL. Nonetheless, thanks again for following up with me and your input. I appreciate your interests. Please also note that I contacted Microsoft via phone and I was redirected to the exact same website url for additional resources. Thus, I am still not able to authenticate the application. Moreover, I would like to confirm that I have a work or school account as I am a Web developer for the university that I am currently attending as a graduate student studying Information Technology. As I am unable to receive a QR scan code and url which should be automatically generated via email. As I stated in the previous posting, I am a registered user and that I have attempted to sign into the MS Authenticator. Additionally, I have already entered my credentials to receive an automated response via my cellular device.  I hope that this information may assist you.  Looking forward to your response. Thanks for your time and happy testing! 

 

Kind Regards,

ComputerWiz

Microsoft

Hi ComputerWhiz,

 

Thanks for clarifying. The QR code/URL will not be sent to you via email. Instead, it's usually available at a website. Depending on how your organization is configured, that url may be aka.ms/MFAsetup or you may have to ask your IT admin for the URL.

 

Thanks

Olena

Copper Contributor

Hi,

 

Are there any plans to make Authenticator settings configurable via Managed App Configuration? So admins can configure it via their choice of MDM.

 

I can't find any documentation on this online. 

 

Thanks, 

 

Microsoft

@djones320 No, there aren't plans to make Authenticator settings configurable through Managed App Configuration, App Protection Policies, and so forth. We've found that none of the existing technologies meet our needs, because Authenticator is a mechanism for authentication, so you get into a lot of looping scenarios. Instead, we're building a new, separate interface to configure settings on Authenticator.

Copper Contributor

Thanks for the update Olena, will this be configured via Azure Portal or InTune then? Or could we do it some other way via a 3rd Party MDM? 

 

Microsoft

@djones320 These Authenticator-specific settings will be configured in the Azure Portal on a new blade that we are currently developing (or by API).

Version history
Last update:
‎Jul 24 2020 01:45 AM
Updated by: