The following forum(s) are migrating to a new home on Microsoft Q&A (Preview): Azure Multi-Factor Authentication!

Ask new questions on Microsoft Q&A (Preview).
Interact with existing posts until December 13, 2019, after which content will be closed to all new and existing posts.

Learn More

 none
Azure MFA: Only phone was visible, now app is too? RRS feed

  • Question

  • Hi!

    I'm currently setting up Azure MFA via combined registration but i need some help.

    When we sat this up yesterday you had to register a phone in order to be able to set up your authenticator app, if you didnt registrer your phone you couldnt get to in aka.ms/mfasetup and add the app, but this morning you have the option to either use your phone or Authenticator app. This is great since it was what we wanted from the beginning but i want to understand why this option just came up by it self.

    No one has changed any setting since yesterday, is there a way where you can specify the "default" method?

    I can add that im quite new to MFA.

    Big thanks for you help.

    Saturday, November 16, 2019 8:01 AM

All replies

  • Hi PhilipHolst, 

    Moving your question to the MSDN forum for Azure Multifactor Authentication for the best possible answer to your question.

    You also have the option to post your question directly to our new Microsoft Q&A platform - currently in preview.

    One of our SME will be able to respond to you in either channel.

    Thanks for your patience.

    Cheers.

    Sunday, November 17, 2019 12:35 AM
    Moderator
  • Hi Philip, 

    Are you trying with the same user or adifferent user?  Do the users have any administrative role assigned to them?

    I can think of the following reasons for the behaviour you observed

    1) User1 has an administrative role assigned to him. Microsoft runs a default for users who have administrator roles assigned to them. 

    2) User1 might have tried to login immediately after enbaling the policy. (less likely) Azure AD takes couple of minutes to propagate changes to all the data centers across the world. 

    3) The number of authentication methods requiroed or mode of authentications avaible has been changed. 

    Ref: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-sspr-pilot#enable-self-service-password-reset

    These reasons may not fit your scenario. Please test with account which has similar role as User1 (The account used yesterday) and let me know what you observe. 


    Please take a moment to "Mark as Answer" and/or "Vote as Helpful" wherever applicable. Thanks!

    Monday, November 18, 2019 8:29 AM
    Moderator
  • Hello PhilipHolst,

    Hope you are doing great. I am just following up on this request in case the information provided by Manoj above in the post helped. Please do mark it as answer in case the information provided helped you so that its relevancy increases and it helps people searching for similar queries . In case if you have any further queries on this , please do let us know and we will be happy to help . 

    Thank you. 


    Please take a moment to "Mark as Answer" and/or "Vote as Helpful" wherever applicable. Thanks!!


    Wednesday, November 20, 2019 3:53 PM
    Moderator
  • Please let us know if you were able to resolve the issue from the replies before. If you still have more questions please let us know with some additional information regarding your question and we'll try to resolve it. It may require additional support escalation if we are unable to resolve this on this msdn thread. 

    If there's no more follow ups in regards to this, I will be marking an answer as answer. If you feel your question has not been answered please let us know anymore pending asks and we can try to follow up accordingly. 

    thanks,

    - Frank H.

    Tuesday, November 26, 2019 8:07 PM
    Moderator