Azure Multi-Factor Authentication 28/04/2021, 5:12 PM

Azure Multi-Factor Authentication

Azure Multi-Factor Authentication (MFA) helps safeguard access to data and applications while maintaining simplicity
for users. It provides additional security by requiring a second form of authentication and delivers strong
authentication through a range of easy to use authentication methods.

For organizations that need to be compliant with industry standards, such as the Payment Card Industry (PCI) Data
Th
Security Standard (DSS) version 3.2, MFA is a must have capability toTauthenticate
his users. Beyond being compliant
is
do do
cu
with industry standards, enforcing MFA to authenticate users can also help cu
organizations to mitigate credential theft
me me
attacks. No da nt be N d nt
b
un ncch long o u anc elo
na c n
au
tho 82@ s to uth h82@ gs to
riz g D o riz g D
ed mai anie ed mai anie
co l.c l c l .c lC
pie om Cho op
ies om ho
sa ng ng
llo . all .
we ow
d! e d!

Th Th
is is
do do
cu cu
me me
d n t d nt
No an be No a nc belo
un cc lon u c n
h g na
au
tho 82@ s to uth h82@ gs to
Da ori
riz
ed
gm
ail n ze g ma Dan
co .co iel C dc il. iel
p m ho o pie com Cho
The security of MFA two-stepieverification
sa ngin its layered approach. Compromising multiple
lies . s all ng
authentication
. factors
llo ow
presents a significant challenge for attackers. we Even if an attacker manages to learn the user's password,
e it is useless
d! d!
without also having possession of the additional authentication method. Authentication methods include:

Something you know (typically a password)

Something you have (a trusted device that is not easily duplicated, like a phone)

Something you are (biometrics)

Th Th
is is
d do
MFA Features ocu cu
me me
d n t d nt
No a n b e N o a nc bto e
Get more usecurity lonless complexity. Azure MFA helps safeguard ch lodata
na cch8with g s
un access
a 8
ng and applications and
st
u tho
helps to meet customer 2 @ demand to for a simple sign-in process. Get strong u 2
thauthentication
@ o Dwith a range of easy
riz gm Da ori gm an
e a n z e
iel message, or mobile app notification—andd callowailcustomers ie
verification options—phone dc ilcall,
. text to choose the
op co
m Ch op .com l Ch
method they prefer. i es o n i es on
all g . all g.
ow ow
ed ed
!
Mitigate threats with real-time monitoring and alerts. MFA helps protect your business with security !
monitoring and machine-learning-based reports that identify inconsistent sign-in patterns. To help mitigate
potential threats, real-time alerts notify your IT department of suspicious account credentials.

Deploy on-premises or on Azure. Use MFA Server on your premises to help secure VPNs, Active Directory
Federation Services, IIS web applications, Remote Desktop, and other remote access applications using
RADIUS and LDAP authentication. Add an extra verification step to your cloud-based applications and services
Th T
by turningis on Multi-Factor Authentication in Azure Active Directory.his
do do
cu cu
me me
Use with Microsoft
da n t 365, Salesforce, and more. MFA for Microsoft 365 d helpsnt secure access to Microsoft 365
No nc b e N ou a nc belo
applicationsun at no lon
additional cost. Multi-Factor Authentication is also available
au c h g n au c h with ngAzure Active Directory
tho 82@ s to tho 82@ s to
Premium and thousandsriz gmof software-as-a-service
Da (SaaS) applications, including
r ize Salesforce,
g ma Dan Dropbox, and other
ed ail n
popular services. co .co iel C dc il. iel
pie m ho o pie com Cho
sa ng s ng
llo . all .
Add protection for Azure administrator we accounts. MFA adds a layer of security to your owAzure administrator
d! e d!
account at no additional cost. When it's turned on, you need to confirm your identity to create a virtual machine,
manage storage, or use other Azure services.

https://www.skillpipe.com/api/2.1/content/urn:uuid:a8812c50-6d9…806a-0305dc39651f@2021-04-09T06:15:29Z/OEBPS/Text/1463762.xhtml Page 1 of 2
Azure Multi-Factor Authentication 28/04/2021, 5:12 PM

MFA Authentication Options

Th Th
is is
do do
cu cu
me me
No da nt be No da nt be
un ncch long un ncch long
au au
tho 82@ s to tho 82@ s to
riz g D riz g D
ed mai anie ed mai anie
co l.c l co l.c l
pie om Cho pie om Cho
sa ng sa ng
llo . llo .
we we
d! d!

Method Description

Places an automated voice call. The user answers the

Th Th
call and presses # in the phone keypad to authenticate.
is is
do do
cu The phone number cu is not synchronized to on-premises
me me
n nt call to phone is important
Call to phone
No d an t bel Active Directory.
No daA voice be
un cc
h
on
g un ncch long
au because it persists
au through a phone handset upgrade,
tho 82@ s to 8
tho 2@ s to
riz gm D allowing the user to riregisterg the Da
ed ail aniel ze
dc
m ai mobile nie app on the new
co
pie
.co
m Chon device. op l.com l Ch
sa ies on
llo g. all g.
we ow
d! e
Sends a text message that containsda! verification code.
The user is prompted to enter the verification code into
the sign-in interface. This process is called one-way
SMS. Two-way SMS means that the user must text
Text message to phone
back a particular code. Two-way SMS is deprecated
and not supported after November 14, 2018. Users who
are configured for two-way SMS are automatically
Th Th
is switched to iscall to phone verification at that time.
do do
cu cu
me me
n n
No d an t bel Sends a push
No d an t bel to your phone or registered
notification
un cc on un cc o
au h g device. The user au views h thennotification
g and selects
tho 82@ s to tho 82@ s to
riz gm D Approve to complete gm
riz verification. DaThe Microsoft
Notification through mobile ed app ail aniel ed ail nie
co .co co l
.co Windows
pie m Chon Authenticator app is available pie for m Chon Phone,
sa g. sa g.
llo
we Android, and iOS. Push notifications llo
we through the mobile
d! app provide the best user experience. d !

The Microsoft Authenticator app generates a new OATH

verification code every 30 seconds. The user enters the
verification code into the sign-in interface. The
Verification code from mobile app Microsoft Authenticator app is available for Windows
Phone, Android, and iOS. Verification code from mobile
Th T
is
do app can behisused
do when the phone has no data
cu cu
me connection or cellularme signal.
da n t d nt
No b e N ou a nc belo
un ncch long n c h8 ngs
auselection passwords so that users do not have ato
There is also a tho 82@ to scache to uthauthenticate
2
ori @g to Da
on trusted devices. The
riz gm Da ma
ze configured
number of days before aeduser must nie
ail re-authenticate on trusted devices can also be nie the value from 1
co .co lC d co i l .co with lC
to 60 days. The default is 14 days. p i es m h o p i es m ho
all ng ng
ow . a llo .
ed we
! d !

https://www.skillpipe.com/api/2.1/content/urn:uuid:a8812c50-6d9…06a-0305dc39651f@2021-04-09T06:15:29Z/OEBPS/Text/1463762.xhtml Page 2 of 2