Hero Banner

Multi-Factor Authentication (MFA)

Learn and ask questions on how to implement MFA

Reply
Jafar70
Level 1 Contributor

Authentication issues

Hi

 

I have a strange Authentication issues for the user that should access for the first time to CSP. there is only authentication method through mobile App and there is no options, likes Authentication phone (SMS/Phone). 

 

So what is happend? it must be an option to select Authentication phone ( SMS/Phone). Please advise

3 REPLIES 3
JanoschUlmer
Microsoft

It might be the admin has enabled the baseline policies or AzureAD security defaults. 

And/or it might now be enforced in your Partner tenant to use MFA when accessing a end customer environment with the CSP partner credentials. 

Those cost-free methods to enable MFA only offer registration via app.

 

To use phone/test message or token devices after doing initial registration with the app the user needs to be enabled for per-User MFA also.

In order to use phone/text message as initial method of registration, the baseline policies/AAD security defaults should not be used, use only per-user MFA and/or MFA via conditional access (Azure AD Premium Plan1 licenses required)

Kind regards,
Janosch
Get consultations form Technical Presales & Deployment services team via https://aka.ms/technicalservices
Jafar70
Level 1 Contributor

''To use phone/test message or token devices after doing initial registration with the app the user needs to be enabled for per-User MFA also''. ( It is correct, I have tested successfuly)

 

''In order to use phone/text message as initial method of registration, the baseline policies/AAD security defaults should not be used'', (the baseline policies/AAD security defaults does not used, so what the reason for that ?)

JanoschUlmer
Microsoft

When all methods are enabled in the service settings https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#mfa-service-settings you need to open a support ticket to investigate.

Kind regards,
Janosch
Get consultations form Technical Presales & Deployment services team via https://aka.ms/technicalservices