Forum Discussion
Microsoft Authenticator on Apple Watch
The only explanation I can find for dropping support for the companion app for watchOS is that it’s "due to it being incompatible with Authenticator security features." The only place I can find this in Microsoft's documentation is in the How to use number matching in multifactor authentication (MFA) notifications - Authentication methods policy article. In that article, it says that Microsoft will enforce the number match experience tenant-wide for all users starting February 27, 2023. Because of the similar timeframe, it's likely this feature that is incompatible. Further evidence of that is in Microsoft's response to a post in the New Microsoft Authenticator security features are now available! article: "Additional Context preview is supported for Apple Watch. However, if the user has Number Matching enabled, they will be unable to use the Apple Watch for authentication. We are working with Apple to address this limitation."
I don't understand why this can't be resolved since a similar number matching feature is working with Microsoft personal accounts. In fact, it's how I authenticated before writing this post. The only difference I see is that I'm prompted to choose one of three numbers when using my Microsoft account while the Azure AD number matching feature requires entering the number. Apple Watch allows entering numbers several ways so I don't see why this would be a limiting factor.
If number matching is the issue, I hope Microsoft will give admins the option to have users select one of x numbers instead of entering a number so that the watchOS companion app can continue to work, at least until the incompatibilities can be resolved.