Multifactor authentication

This page's changes and edits · All guidance changes

Microsoft's edit · 18 Sep 2023 15:55 UTC

[BULK] - DocuTune - Rebranding of Azure Active Directory to Microsoft Entra

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 2d7589c · +17 ~~−15~~ lines · also on GitHub

11 ---

2 −title: Azure AD Multi-Factor Authentication overview

3 −description: Learn how Azure AD Multi-Factor Authentication helps safeguard access to data and applications while meeting user demand for a simple sign-in process.

2 +title: Microsoft Entra multifactor authentication overview

3 +description: Learn how Microsoft Entra multifactor authentication helps safeguard access to data and applications while meeting user demand for a simple sign-in process.

55 services: multi-factor-authentication

66 ms.service: active-directory

⋯ 8 unchanged lines

1515

1616 ms.collection: M365-identity-device-management

1717 ---

18 −# How it works: Azure AD Multi-Factor Authentication

18 +# How it works: Microsoft Entra multifactor authentication

1919

20 −Multi-factor authentication is a process in which users are prompted during the sign-in process for an additional form of identification, such as a code on their cellphone or a fingerprint scan.

20 +Multifactor authentication is a process in which users are prompted during the sign-in process for an additional form of identification, such as a code on their cellphone or a fingerprint scan.

2121

2222 If you only use a password to authenticate a user, it leaves an insecure vector for attack. If the password is weak or has been exposed elsewhere, an attacker could be using it to gain access. When you require a second form of authentication, security is increased because this additional factor isn't something that's easy for an attacker to obtain or duplicate.

2323

24 −![Conceptual image of the various forms of multi-factor authentication.](./media/concept-mfa-howitworks/methods.png)

24 +![Conceptual image of the various forms of multifactor authentication.](./media/concept-mfa-howitworks/methods.png)

2525

26 −Azure AD Multi-Factor Authentication works by requiring two or more of the following authentication methods:

26 +Microsoft Entra multifactor authentication works by requiring two or more of the following authentication methods:

2727

2828 * Something you know, typically a password.

2929 * Something you have, such as a trusted device that's not easily duplicated, like a phone or hardware key.

3030 * Something you are - biometrics like a fingerprint or face scan.

3131

32 −Azure AD Multi-Factor Authentication can also further secure password reset. When users register themselves for Azure AD Multi-Factor Authentication, they can also register for self-service password reset in one step. Administrators can choose forms of secondary authentication and configure challenges for MFA based on configuration decisions.

32 +Microsoft Entra multifactor authentication can also further secure password reset. When users register themselves for Microsoft Entra multifactor authentication, they can also register for self-service password reset in one step. Administrators can choose forms of secondary authentication and configure challenges for MFA based on configuration decisions.

3333

34 −You don't need to change apps and services to use Azure AD Multi-Factor Authentication. The verification prompts are part of the Azure AD sign-in, which automatically requests and processes the MFA challenge when needed.

34 +You don't need to change apps and services to use Microsoft Entra multifactor authentication. The verification prompts are part of the Microsoft Entra sign-in, which automatically requests and processes the MFA challenge when needed.

3535

3636 >[!NOTE]

3737 >The prompt language is determined by browser locale settings. If you use custom greetings but don’t have one for the language identified in the browser locale, English is used by default. Network Policy Server (NPS) will always use English by default, regardless of custom greetings. English is also used by default if the browser locale can't be identified.

⋯ 4 unchanged lines

4242

4343 When users sign in to an application or service and receive an MFA prompt, they can choose from one of their registered forms of additional verification. Users can access [My Profile](https://myprofile.microsoft.com) to edit or add verification methods.

4444

45 −The following additional forms of verification can be used with Azure AD Multi-Factor Authentication:

45 +The following additional forms of verification can be used with Microsoft Entra multifactor authentication:

4646

4747 * Microsoft Authenticator

4848 * Authenticator Lite (in Outlook)

⋯ 4 unchanged lines

5353 * SMS

5454 * Voice call

5555

56 −## How to enable and use Azure AD Multi-Factor Authentication

56 +<a name='how-to-enable-and-use-azure-ad-multi-factor-authentication'></a>

5757

58 −You can use [security defaults](../fundamentals/security-defaults.md) in Azure AD tenants to quickly enable Microsoft Authenticator for all users. You can enable Azure AD Multi-Factor Authentication to prompt users and groups for additional verification during sign-in.

58 +## How to enable and use Microsoft Entra multifactor authentication

5959

60 +You can use [security defaults](../fundamentals/security-defaults.md) in Microsoft Entra tenants to quickly enable Microsoft Authenticator for all users. You can enable Microsoft Entra multifactor authentication to prompt users and groups for additional verification during sign-in.

61 +

6062 For more granular controls, you can use [Conditional Access](../conditional-access/overview.md) policies to define events or applications that require MFA. These policies can allow regular sign-in when the user is on the corporate network or a registered device but prompt for additional verification factors when the user is remote or on a personal device.

6163

6264 ![Diagram that shows how Conditional Access works to secure the sign-in process.](media/tutorial-enable-azure-mfa/conditional-access-overview.png)

6365

6466 ## Next steps

6567

66 −To learn about licensing, see [Features and licenses for Azure AD Multi-Factor Authentication](concept-mfa-licensing.md).

68 +To learn about licensing, see [Features and licenses for Microsoft Entra multifactor authentication](concept-mfa-licensing.md).

6769

68 −To learn more about different authentication and validation methods, see [Authentication methods in Azure Active Directory](concept-authentication-methods.md).

70 +To learn more about different authentication and validation methods, see [Authentication methods in Microsoft Entra ID](concept-authentication-methods.md).

6971

70 −To see MFA in action, enable Azure AD Multi-Factor Authentication for a set of test users in the following tutorial:

72 +To see MFA in action, enable Microsoft Entra multifactor authentication for a set of test users in the following tutorial:

7173

7274 > [!div class="nextstepaction"]

73 −> [Enable Azure AD Multi-Factor Authentication](./tutorial-enable-azure-mfa.md)

75 +> [Enable Microsoft Entra multifactor authentication](./tutorial-enable-azure-mfa.md)

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:35 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.