Home

Multi-Factor Authentication for people without a Smart Phone?

%3CLINGO-SUB%20id%3D%22lingo-sub-266912%22%20slang%3D%22en-US%22%3EMulti-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266912%22%20slang%3D%22en-US%22%3E%3CP%3EHowdy%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20a%20couple%20people%20who%20don't%20have%20Smart%20Phones%20and%20need%20to%20use%20MFA.%26nbsp%3B%20We%20don't%20want%20to%20use%20a%20simple%20Text%20Message%20if%20we%20can%20and%20prefer%20to%20use%20something%20a%20bit%20more%20secure.%26nbsp%3B%20I%20found%20there%20is%20an%20Authenticator%20App%20for%20Windows%2010%20but%20it%20doesn't%20seem%20to%20work%20with%20O365%20accounts.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20there%20any%20sort%20of%20keyfob%20dongle%20or%20USB%20dongle%20thing%20that%20work%20with%20Office%20365%20that%20we%20can%20get%20for%20people%20who%20don't%20have%20smartphones%3F%26nbsp%3B%20I've%20used%20the%20kind%20where%20the%20number%20on%20the%20fob%20changes%20every%20minute%20just%20like%20an%20authenticator%20app%20would%20but%20that%20was%20many%20years%20ago.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20anyone%20knows%20something%20we%20can%20use%20to%20make%20this%20work%2C%20let%20me%20know.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-266912%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMulti-Factor%20Authentication%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267090%22%20slang%3D%22en-US%22%3ERe%3A%20Multi-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267090%22%20slang%3D%22en-US%22%3Ewell%20if%20you%20are%20using%20your%20laptop%20%2F%20desktop%20to%20access%20o365%20on%20the%20same%20machine%20winauth%20is%20running%2C%20you're%20not%20exactly%20using%20MFA%20%3AP.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267060%22%20slang%3D%22en-US%22%3ERe%3A%20Multi-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267060%22%20slang%3D%22en-US%22%3E%3CP%3EI%20use%26nbsp%3BWinAuth.exe%20on%20desktop%2FLaptop%20to%20create%20MFA%20for%20people%20without%20SmartPhone.%3C%2FP%3E%3CP%3EWorks%20as%20a%20charm%20.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echeers.%3C%2FP%3E%3CP%3EJan%20Swinkels%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267032%22%20slang%3D%22en-US%22%3ERe%3A%20Multi-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267032%22%20slang%3D%22en-US%22%3E%3CP%3EI%20forgot%20to%20mention%20that%20we%20have%20a%20local%20AD%20system%20that%20syncs%20up%20to%20Azure%20AD.%26nbsp%3B%20I%20don't%20know%20if%20that%20changes%20anything%20or%20not.%26nbsp%3B%20We%20are%20using%20Exchange%2C%20Teams%2C%20etc%20in%20Office%20365%20have%20AD%20syncing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267028%22%20slang%3D%22en-US%22%3ERe%3A%20Multi-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267028%22%20slang%3D%22en-US%22%3E%3CP%3ESupport%20for%20hardware%20tokens%2C%20FIDO%20and%20other%20methods%20is%20coming%20soon%2C%20as%20announced%20in%20this%20Ignite%20session%3A%20%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DAu7spkRcDFU%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DAu7spkRcDFU%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1039117%22%20slang%3D%22en-US%22%3ERe%3A%20Multi-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1039117%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%2C%20I%20have%20a%20customer%20with%20a%20similar%20situation%20wherein%20they%20would%20like%20to%20use%20UB%20keys%20%2C%20but%20they%20dont%20have%20an%20option%20to%20leverage%20that%20option%20at%20the%20time%20of%20configuration%2C%20wherein%20it%20still%20prompts%20the%20user%20to%20use%20the%20authenticator%20app%20.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1039157%22%20slang%3D%22en-US%22%3ERe%3A%20Multi-Factor%20Authentication%20for%20people%20without%20a%20Smart%20Phone%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1039157%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F379844%22%20target%3D%22_blank%22%3E%40Rahul_Singh%3C%2FA%3EWe%20use%20the%20SafeID%2FMini%20tokens%20from%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fwww.deepnetsecurity.com%2Fauthenticators%2Fone-time-password%2Fsafeid%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.deepnetsecurity.com%2Fauthenticators%2Fone-time-password%2Fsafeid%2F%3C%2FA%3E%3C%2FP%3E%3CP%3EThey%20work%20great%20for%20those%20that%20don't%20have%2C%20or%20don't%20want%20to%20use%2C%20a%20smartphone.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Mike Boehm
Regular Contributor

Howdy,

 

We have a couple people who don't have Smart Phones and need to use MFA.  We don't want to use a simple Text Message if we can and prefer to use something a bit more secure.  I found there is an Authenticator App for Windows 10 but it doesn't seem to work with O365 accounts.

 

Are there any sort of keyfob dongle or USB dongle thing that work with Office 365 that we can get for people who don't have smartphones?  I've used the kind where the number on the fob changes every minute just like an authenticator app would but that was many years ago.

 

If anyone knows something we can use to make this work, let me know.

 

Thanks!

6 Replies
Highlighted

Support for hardware tokens, FIDO and other methods is coming soon, as announced in this Ignite session: https://www.youtube.com/watch?v=Au7spkRcDFU

Passwords are the weakest link for security and your business. Learn about new and enhanced solutions that can help you provide secure, password-less options...
Highlighted

I forgot to mention that we have a local AD system that syncs up to Azure AD.  I don't know if that changes anything or not.  We are using Exchange, Teams, etc in Office 365 have AD syncing.

 

Thanks.

Highlighted

I use WinAuth.exe on desktop/Laptop to create MFA for people without SmartPhone.

Works as a charm .

 

cheers.

Jan Swinkels

Highlighted
well if you are using your laptop / desktop to access o365 on the same machine winauth is running, you're not exactly using MFA :P.
Highlighted

Hi @Vasil Michev , I have a customer with a similar situation wherein they would like to use UB keys , but they dont have an option to leverage that option at the time of configuration, wherein it still prompts the user to use the authenticator app .

Highlighted

@Rahul_SinghWe use the SafeID/Mini tokens from here:

http://www.deepnetsecurity.com/authenticators/one-time-password/safeid/

They work great for those that don't have, or don't want to use, a smartphone.

Related Conversations