Microsoft Authenticator
Microsoft mobile app that provides MFA verification, passwordless sign-in, and password management.
What is Microsoft Authenticator?
Microsoft Authenticator supports multiple authentication methods: push notifications with number matching, time-based one-time passwords (TOTP), and passwordless phone sign-in. Number matching (requiring users to type a number shown on screen) mitigates MFA fatigue attacks. The app can also function as a passkey provider and password manager.
In Microsoft 365
Microsoft Authenticator is the recommended MFA method for Azure AD. It supports push notifications, number matching, passwordless sign-in, and TOTP codes for third-party services. It can be deployed via Intune and enforced through Conditional Access authentication strength.
Examples
- 1Push notification with number matching
- 2Passwordless phone sign-in
- 3TOTP code for third-party apps
Related TrueConfig Controls
These controls help implement and verify microsoft authenticator in your Microsoft 365 environment.