question

MarioonMicrosoft-1066 avatar image
0 Votes"
MarioonMicrosoft-1066 asked MelaGermier commented

O365 MFA: “Sign in other way” not working for option Email.

Hi,

We are using Microsoft 365 and Multifactor Factor Authentication to login in the Office 365 portal. We use Microsoft Authenticator App and an Email Address for MFA. Users MFA is configured in the users account in Security Info and is enabled in the Microsoft Admin Center.

When trying to use the secondary MFA option, Email Address, by selecting “Sign in another way” when logging in to the Office365 portal, you do not get the option to send a code to the Email Address.

You get only the options:
• Approve a request via Authenticator App or
• Use verification code from my mobile app

This means that when you are using MFA and you do not have your mobile phone, you cannot login. We don't know if we will use MFA in such a case.

Is this by design or am I configuring the MFA incorrect?

Mario

microsoft-authenticator
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@MelaGermier Our organization shares the same need for signing in another way using email. We’d like to configure cell phone as the default MFA method with an alternative option to sign in another way using email. If the user has misplaced their phone, they would be able to check their email via a browser on their pc. Is this a scenario Microsoft plans to support?

Thank you

0 Votes 0 ·
MelaGermier avatar image MelaGermier CelesteCerrillo-5211 ·

Hi @CelesteCerrillo-5211

No, I do not. But as Admin you have diferent Option, Temporary Access Pass or also Add a new Phone Number.... You can also deploy this Access to your HelpDesk.

BR
Mela

0 Votes 0 ·

Thank you @MelaGermier we’re actually using Azure AD B2C MFA are the limitations and options are the same?

Thank you

0 Votes 0 ·
Show more comments
MelaGermier avatar image
0 Votes"
MelaGermier answered

Hi @MarioonMicrosoft-1066

I thought the same as you, but according to this documentation, the email address option is only used for SSPR.

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods#how-each-authentication-method-works
118140-image.png

BR
Mela



image.png (19.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarioonMicrosoft-1066 avatar image
0 Votes"
MarioonMicrosoft-1066 answered

Thanks Mela.
Not a good day if you do not have your phone.
Mario

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.