When setting up FIDO2-based authentication, you’ll follow a process similar to Microsoft Authenticator – updating the authentication policy to allow the method and then instructing users to self-register their security [...]
The Microsoft Authenticator app provides a convenient way to sign in to any Azure AD account with a supported mobile device. Before users can sign in using the method, however, [...]
WHFB supports cloud-only, hybrid Azure AD, and on-premises deployments. The easiest method to deploy Windows Hello is in a cloud-only model since the Microsoft 365 organization is set up for [...]
Microsoft’s recommended solution for password-less authentication is Windows Hello for Business. It’s designed for users that have their own dedicated PC. When logging in, the user presents a biometric or [...]
Many administrators and users are already familiar with the Microsoft Authenticator mobile device app, using it for MFA. The Authenticator app can also be used as a password-less sign-in option. [...]
Physical tokens, such as the Fast Identity Online 2 (FIDO2)-based token or security key, are another password-less option that can be used. While the Microsoft Authenticator app is a soft [...]
Now that you have an understanding of the different password-less options available for Microsoft 365, let’s look at some information that will help you choose the appropriate solution. Table 7.1 [...]
If MFA was configured in your tenant before October 2019, it may have been configured using the legacy MFA scheme. Prior to newer technologies, MFA was enabled on a per-user [...]
Conditional access provides the most fine-grained control when managing the MFA requirements for your organization. Conditional access policies can be configured from the Azure portal. To access the Conditional access [...]
Over the course of the last few chapters, you’ve learned a lot about identity, synchronization, and sign-in methods – all part of the Microsoft 365 foundation. In this chapter, we’ll [...]