Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

Authentication method capabilities

This page's changes and edits · All guidance changes

Microsoft's edit ·

Fix broken links in authentication docs

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 999ee62 · +14 −14 lines · also on GitHub

⋯ 26 unchanged lines
2727 | [Email OTP](concept-sspr-howitworks.md#authentication-methods) | No | SSPR and sign-in<sup>2</sup> | SSPR |
2828 | [External MFA](how-to-authentication-external-method-manage.md) | No | MFA | No |
2929 | [Hardware OATH tokens (preview)](concept-authentication-oath-tokens.md#hardware-oath-tokens-preview) | No | MFA | SSPR |
30 −| [Microsoft Authenticator passwordless](concept-authentication-authenticator-app#passwordless-sign-in-via-notifications) | Yes | No | No |
31 −| [Microsoft Authenticator push notifications](concept-authentication-authenticator-app#mfa-via-notifications-through-mobile-app) | Yes | MFA | SSPR |
32 −| [Passkey (FIDO2)](concept-authentication-passkeys-fido2) | Yes | MFA | No |
33 −| [Passkey in Microsoft Authenticator](concept-authentication-authenticator-app) | Yes | MFA | No |
30 +| [Microsoft Authenticator passwordless](concept-authentication-authenticator-app.md#passwordless-sign-in-via-notifications) | Yes | No | No |
31 +| [Microsoft Authenticator push notifications](concept-authentication-authenticator-app.md#mfa-via-notifications-through-mobile-app) | Yes | MFA | SSPR |
32 +| [Passkey (FIDO2)](concept-authentication-passkeys-fido2.md) | Yes | MFA | No |
33 +| [Passkey in Microsoft Authenticator](concept-authentication-authenticator-app.md) | Yes | MFA | No |
3434 | Password | Yes | No | No |
35 −| [Platform Credential for macOS](concept-authentication-platform-credential-for-macos) | Yes | MFA | No |
36 −| [QR code](concept-authentication-qr-code) | Yes | No | No |
37 −| [SMS sign-in](howto-authentication-sms-signin) | Yes | MFA | SSPR |
38 −| [Software OATH tokens](concept-authentication-oath-tokens#software-oath-tokens) | No | MFA | SSPR |
39 −| [Synced passkey](concept-authentication-passkeys-fido2) | Yes | MFA | No |
40 −| [Temporary Access Pass (TAP)](howto-authentication-temporary-access-pass) | Yes | MFA | No |
35 +| [Platform Credential for macOS](concept-authentication-platform-credential-for-macos.md) | Yes | MFA | No |
36 +| [QR code](concept-authentication-qr-code.md) | Yes | No | No |
37 +| [SMS sign-in](howto-authentication-sms-signin.md) | Yes | MFA | SSPR |
38 +| [Software OATH tokens](concept-authentication-oath-tokens.md#software-oath-tokens) | No | MFA | SSPR |
39 +| [Synced passkey](concept-authentication-passkeys-fido2.md) | Yes | MFA | No |
40 +| [Temporary Access Pass (TAP)](howto-authentication-temporary-access-pass.md) | Yes | MFA | No |
4141 | [Verified ID](concept-authentication-verified-id.md)<sup>3</sup> | No | No | Account recovery |
42 −| [Voice call](concept-authentication-phone-options) | No | MFA | SSPR |
42 +| [Voice call](concept-authentication-phone-options.md) | No | MFA | SSPR |
4343 | [Windows Hello for Business](/windows/security/identity-protection/hello-for-business/hello-overview) | Yes | MFA<sup>1</sup> | No |
4444
4545 <sup>1</sup>Windows Hello for Business can serve as a step-up MFA credential if a user is enabled for passkey (FIDO2) and has a passkey registered.
4646
47 −<sup>2</sup>Email OTP is available for tenant members for [self-service password reset (SSPR)](concept-sspr-howitworks#authentication-methods). You can also configure it for [sign-in by guest users](/entra/external-id/one-time-passcode).
47 +<sup>2</sup>Email OTP is available for tenant members for [self-service password reset (SSPR)](concept-sspr-howitworks.md#authentication-methods). You can also configure it for [sign-in by guest users](/entra/external-id/one-time-passcode).
4848
4949 <sup>3</sup>Verified ID is an identity verification capability, not a traditional authentication method. It provides proof of identity for account recovery but can't be used for sign-in, MFA, or SSPR.
5050
⋯ 28 unchanged lines
7979
8080 ## Related content
8181
82 −- [Passkeys (FIDO2)](concept-authentication-passkeys-fido2)
82 +- [Passkeys (FIDO2)](concept-authentication-passkeys-fido2.md)
8383 - [Verified ID identity verification overview](concept-authentication-verified-id.md)
8484 - [Account recovery overview](concept-account-recovery-overview.md)
8585 - [Enable and configure account recovery](how-to-account-recovery-enable.md)
86 −- [Get started with phishing-resistant MFA deployment in Microsoft Entra ID](how-to-plan-prerequisites-phishing-resistant-passwordless-authentication)
86 +- [Get started with phishing-resistant MFA deployment in Microsoft Entra ID](how-to-plan-prerequisites-phishing-resistant-passwordless-authentication.md)

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:15 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current