A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Users can choose from their registered MFA verification methods when prompted. Supported methods in Microsoft Entra multifactor authentication include:
- Microsoft Authenticator
- Authenticator Lite (in Outlook)
- Windows Hello for Business
- Passkey (FIDO2)
- Passkey in Microsoft Authenticator
- QR code
- Certificate-based authentication (when configured for MFA)
- External MFA
- Temporary Access Pass (TAP)
- OATH hardware token (preview)
- OATH software token
- SMS
- Voice call
For planning and tenant configuration, Microsoft also lists these commonly enabled MFA methods:
- Windows Hello for Business
- Microsoft Authenticator app
- FIDO2 security key
- Microsoft Authenticator passkey
- Synced passkey (preview)
- Hardware OATH tokens (preview)
- Software OATH tokens
- SMS verification
- Voice call verification
Microsoft recommends enabling more than one MFA method so users have a backup if their primary method is unavailable. For flexibility and usability, Microsoft Authenticator is recommended.
References: