Recommended: Azure AD Multi-Factor Authentication, with push notifications allowed as a verification method.To use passwordless phone sign-in with the Microsoft Authenticator app, the following prerequisites must be met: No need to remember your account password! The Microsoft Authenticator app can be used to sign in to any Azure AD account without using a password. If the smartphone is not yet registered, it will be recorded accordingly in this step.Enable and setup passwordless sign-in with Microsoft Authenticator app To do this, he can activate the option under “Enable phone sign-in” in the relevant account. Has the end user already set up the Microsoft Authenticator and the option “Any” has been selected for the “Authentication Method”? This means that the user has to activate the passwordless login once. I choose the following options here to give the user the freedom to use Passowrdless or not. The map with the login location is displayed. Not only push, but also a number for confirmation must be selected. In the options menu we have the following options: setting We carry out the configuration via the three points: Under 'Target' we can choose whether the option is available for all users or only a selected group. We do this under Azure AD> Security> Authentication methods. Settings User - Microsoft Authenticatorįirst we have to make sure that the authentication method 'Microsoft Authenticator' is active in Azure AD.Here you can find Microsoft's contribution to 'Number matching' and the map: New Microsoft Authenticator security features are now available! - Microsoft Tech Community Table of Contents The push can already be made more secure. With the additional map display, there is still another factor in order to be able to offer the user security. In addition, the passwords are often lost and thus generate additional work in many places. Because most attacks happen because of intercepted passwords. The passwordless login also raises security to a new level. The passwordless login with the Microsoft Authenticator offers a very practical option to log in easily and without additional hardware.

In this post I want to explain the Passwordless scenario with the Microsoft Authenticator and the location map as the display.

In the past post I talked about that Passowordless variant with a security key and its deployment is written.

Passwordless sign in