Hello, everyone. In today’s article, we’ll explain what Microsoft Entra multifactor authentication is and what it is used for. This article covers the subtopic “configure multi-factor authentication settings” of the AZ-500 – Microsoft Azure Security Technologies exam. If you’re preparing to take this exam, don’t miss the upcoming articles.
What is Microsoft Entra multifactor authentication?
Microsoft Entra multifactor authentication (Multi-factor Authentication) uses an additional layer of access protection for applications or services hosted in Azure. It is possible to enable or disable MFA for users according to the information security policy defined by the company.
Password issues
The use of passwords to access cloud applications brings some information security issues. Among them, we can mention:
- Password reuse;
- Passwords stored electronically in a single place;
- Passwords that are easy to remember are also easy to guess;
- The same or similar passwords across different sites;
- Passwords that are not changed frequently;
- Users reusing personal passwords in professional environments.
Authentication types
With the issues mentioned above and the number of stolen passwords, the concept of multifactor authentication is introduced, where more than one authentication method is used to provide access to a resource. For example: password, hardware or software token, mobile device to receive a secret code, biometrics.
Microsoft Entra multifactor authentication uses some of the methods mentioned above. Let’s talk a little more about them.
Phone call mode
The phone call mode used by Microsoft Entra multifactor authentication places an automated call to a previously registered number, and the user presses the # key to authenticate.
It is possible to configure the caller number and also optionally request a PIN code during the call (Azure MFA Server).
SMS mode
SMS mode allows an authentication code to be sent, which the user uses to confirm their access credentials in the browser, called a one-way check.
When there is an Azure MFA Server, it is possible to ask the user to send the PIN code back, confirming their credentials and gaining access to the service in the browser. This mode is called a two-way check.
Microsoft Authenticator app mode
The Microsoft Authenticator app is software used for two-factor authentication and uses three methods to protect users’ access to services in Azure. They are:
- Push verification – A message is sent to the user’s app on their smartphone or tablet, and they confirm whether the access is legitimate.
- Pin code – It is possible to add a PIN code to confirm the identity when you have an Azure MFA Server.
- OAUTH Token – After signing in to the app, it generates a random 6-digit code every 30 seconds that the user uses to access services in Azure.
Summary
In today’s article, we gave a brief introduction to the purpose of Microsoft Entra multifactor authentication and the methods used to confirm users’ identities when accessing services in Azure.
In the next article, we’ll explain the licenses available for MFA and how to enable the two-factor authentication methods we just explained.
I hope this content has contributed to enriching your knowledge of Azure.
Did you like the post? Like and share it. 🙂
If you have any suggestions or observations, leave a comment.
Best regards,
Ulysses Neves
