Microsoft Authenticator NEW Features that you MUST Know!

In this session we take a look at the latest updates for Microsoft Entra’s authentication options. Including an update to the Microsoft authenticator which introduces number matching as an option. In this video I’ll show you everything you need to know about getting ready and how to implement this cool feature update. In addition I’ll also walk you through some of the other enhanced authentication options as well as a cool Conditional Access update. This is one session you’ll not want to miss.

[@andrewmccallum5699]

Thanks, top session on Authenticator with Number Matching - it's a hard one to get to learn, great to see different ways on how / why to approach it.

[@AndyMaloneMVP]

Glad you enjoyed it!

[@EspenGud]

Hi Andy. Another good video. Really like this video, one theme and the length of the video is not too long. Looking forward to your short videos.

[@AndyMaloneMVP]

Awesome thanks 😀

[@glennfeaster8217]

I am very excited that Microsoft is going to let the users know what system they are authenticating for! I appreciate your detailed instructions and explanations. Keep it up, Andy!

[@AndyMaloneMVP]

Thanks Glenn, I really appreciate that

[@riteshsavant4800]

Thanks for sharing the knowledge! You are amazing 😇

[@AndyMaloneMVP]

So nice of you

[@todornikolov7286]

No need of 'shortzzz' videos. And, of course, today I learn something new :) . Thank you!

[@MrMarcLaflamme]

Agreed. Don't succumb and cater to the ADHD generation! 🤣

[@oOMonkeyMagicOo]

Enabled number matching a few months back. Good feature to help MFA fatigue. Not a fan of shorts but appreciate the pressure KZbin is putting on content creators, so it's inevitable that you have to do it. It wont impact my viewership though as I only click on the full videos and ignore all shorts no matter how clickbaitable they seem, so go ahead with with the shorts. It may bring in more viewers, and those that don't like them don't have to watch them. I don't really understand why people complain about KZbin Channels offering free content, you are not forcing anyone to watch videos or shorts if they don't want to. Thanks for the content, and the time you put in.

[@AndyMaloneMVP]

Thanks so much. I appreciate the support :-)

[@Elscorpio606]

Great learning video

[@harrylumsdon6773]

Good info and timely.

[@AndyMaloneMVP]

Thanks for watching!

[@ianbird6997]

Thanks great video 👍

[@AndyMaloneMVP]

No problem 👍

[@leklektv6154]

You rock sir Andy!

[@AndyMaloneMVP]

Thank you kindly!

[@gregoryigbinoba4778]

Great video. Thanks for the explanation. Do you have any video on Outlook app for mobile device, its limitation in security and management?

[@AndyMaloneMVP]

Hmm let me see what I can do

[@tony6626]

Love the video as always Andy. I would subscribe again if that were possible! Thanks for sharing.

[@AndyMaloneMVP]

Cool, thanks

[@patrick__007]

Can't tell it enough, numero uno hero

[@AndyMaloneMVP]

Thanks 😁

[@AndyMaloneMVP]

Yes the solution some kind of data connection either via mobile or WiFi.

[@scottt2481]

Thank you, Thank you, Thank you!!

[@AndyMaloneMVP]

You are so welcome!

[@silvanabongiorno3292]

💙Thank you.

[@MichaelGreen831]

Been using number matching for over a year. The new features are cool, but you missed one new feature that I think is important. Microsoft added the ability to do passwordless sign in on iOS for multiple accounts and tenants. Previously, only one account could be setup for passwordless.

[@AndyMaloneMVP]

Oh well spotted Michael however I was going to cover that feature in an upcoming in tune video. Thanks again now

[@chankeo4791]

Great content

[@AndyMaloneMVP]

Thanks 😊

[@mikesmith2315]

the shorts are really good

[@AndyMaloneMVP]

Awesome thanks 👍

[@hhhennig]

thx

[@fireside_talks]

Hi Andy, just wondering what you use to create your videos and blur parts of the video?

[@AndyMaloneMVP]

Fantasia studio 2023

[@JameelAhmad-qd6wm]

Hi Andy, Great video as always and keep up the great work. FYI as discussed, Microsoft recently changed Microsoft 365 E5 subscription as they don't offer the free trial anymore, you have to take out the £48.10 user/month annual commitment subscription. Kindest regards

[@AndyMaloneMVP]

Ah you need to know where to look. Open this page up in a private window www.microsoft.com/en-us/microsoft-365/enterprise/office-365-e5?activetab=pivot%3aoverviewtab Have fun :-)

[@JameelAhmad-qd6wm]

@@AndyMaloneMVP greatly appreciated and many thanks ❤️

[@kenlee5461]

Great video. Excuse the noobie question but if I'm travelling overseas and don't have any mobile plan then how would the number challenge work? Would Internet provided by an Internet Cafe work?

[@AndyMaloneMVP]

This technology requires cellular or Wi-Fi connectivity

[@kenlee5461]

Hi Andy, thanks for the reply. When say "cellular" do you mean just "data"? No phone/SMS plan?

[@fireside_talks]

Hi Andy, do have a link on how to setup and configure that allows users to use the outlook mobile app to do mfa authentication. As in the outlook app has the option but greyed out for some Users and other users can enable it.

[@AndyMaloneMVP]

Not specifically but check out Learn.Microsoft.com

[@theblingy5]

We have a 3rd party enterprise application that is constantly requesting number matching MFA on intune enrolled IOS devices, is there a way to remove the MFA prompt from that application as long as the sign in is being requested from an enrolled device? the devices are Hybrid joined

[@AndyMaloneMVP]

Hmm not sure I'd reach out to support for that. Try the Microsoft Tech Community :-)

[@Our1stPlanet]

Hello At time Code 9:09 did you say authentication strength ? Sorry for the inconvenience, but that was the only word I didn't understand Otherwise good

[@AndyMaloneMVP]

You can create your own authentication strengh look at this video it's explained better kzbin.info/www/bejne/r6isapaGYt98b68

[@Simon-vc1wk]

I've noticed Azure and Power BI are asking for 2FA to sign in. I currently have this app paired to my personal phone at home and have been using it for a while to sign into 365, xbox, Microsoft Account etc at home. I also a work Microsoft Account and have recently been asked by my work email to use 2FA as a sign in I won't to keep my work details and home details separate. However I noticed the Authentication App wanted to pair to my work email. Is it possible to use this app with two distinct accounts?

[@AndyMaloneMVP]

Yes you can merge accounts. Visit Learn.Microsoft.com for details 👍😊

[@Simon-vc1wk]

@Andy Malone MVP thanks for replying. I'll let my company know, I didn't want to merge work and private microsoft accounts for obvious reasons.

[@donfuchs172]

Hey man,....Here's the problem,...I can't sign in to the DEO Florida Reimployment website with the 8 digit upgrade in the Microsoft Authentication App, ...On the DEO website, you can only type in a 6 digit number,...not a 8 digit number,...🤔🤔🤔 is there another app that will work with the DEO website,...??? (Florida)

[@AndyMaloneMVP]

The two digit number is a default setting now, so you need to contact your IT support I guess. Sorry for your problem. Best of luck

[@cmdrefstathiusplacidus9003]

going to assume if you're using a VPN on your device which is putting you physically in a different part of the world this will trigger this feature, correct?

[@AndyMaloneMVP]

The VPN can still have a trusted connection as you can install at certificate onto the device. So when the device authenticates, it still appears as a trusted device.

[@MartinByskov1337]

Is it me, or my player? Is there something wrong in the sync between audio and video?

[@AndyMaloneMVP]

Hmm i’m not aware of any issues with this video. Certainly I will check further for you. Do you also remember that KZbin are rendering this video in 4K so sometimes you do get a more basic addition first, perhaps that is something that will explain it

[@ritagriffin7120]

Is Authy or microsoft authenticator better for avoiding hackers? (Although authy needs the phone number)

[@AndyMaloneMVP]

Honestly, I’ve not used it however, I have used multifactor authentication via Microsoft 365 and Azure. Which is superb. The point here is that two factor authentication is potentially vulnerable, but when you combine it with a password less solution it’s excellent. Also, remember that Microsoft has a multitude of additional detection, and defence mechanisms built in to the platform via defender, and Purview. Anyway, you asked for my opinion 😊

[@ritagriffin7120]

@@AndyMaloneMVP Thank you! Does the Microsoft 365 multifactor authenticator provide security for any type of app for e.g instagram, facebook, etc..?

[@AndyMaloneMVP]

@@ritagriffin7120 yes absolutely

[@ritagriffin7120]

@@AndyMaloneMVP okay thanks!

[@coffeesunshine3221]

Hi Andy how do I get a 6 digits instead of 8?

[@AndyMaloneMVP]

Check your policy settings

[@stevenhernandez3324]

Can your job track your location by using the Microsoft Authentication

[@AndyMaloneMVP]

No, but it is location aware to prevent logins via impossible travel. So, for example, if you logged on in London and 10 minutes later you had a notification of a login in Sydney, that’s impossible travel and you would typically reject the login via your app.

[@meepmeepp4590]

The app for me is using to much of my battery like not even a minute and it’s all ready down 3% I’m not sure if it’s my phone that’s the problem but I was wondering if you would know why

[@AndyMaloneMVP]

Good point. You should feed this back to Microsoft.

[@DavidM2002]

No shorts. I close that section as soon as I see it on YT. Why would anyone record a video in portrait mode when they know that the majority of us will watch in landscape mode and waste 2/3 of the screen space ?

[@AndyMaloneMVP]

Hi David, thanks for your comment. I really do appreciate it. My thoughts are with you on shorts, however, there does seem to be a demand for it, especially from people on the go and although I’m making no money from them they do attract subscribers. However, this will not distract me from my main format which is what you like to watch. Thanks again, and all the best Andy

[@PracticingPhotography]

Great video, but enabling this feature does not reduece your chances of being hacked by 99+ %. There are other methods that get around the MFA, so while this is a huge reduction, it is just one piece of the attack surface.

[@AndyMaloneMVP]

I lied it's actually it's 99.1%. Please let me know whew these so called methods are documented? I'd love to know. Assuming of course the hacker does NOT have physical access.

[@PracticingPhotography]

@@AndyMaloneMVP Sorry if you took that wrong. All the MFA in the world doesn't stop a user from clicking phishing link. So, my comment was based on the broad statement that this improvement stops 99 point whatever. It doesn't. It probably stops 99.x of the MFA attack surface. So, my point was more targetet at not thinking that this one step prevents almost all attacks. I re-listened to the video and you do say it prevents 99% of authentication attacks and you are probably right. Thanks for the great video

[@AndyMaloneMVP]

@@PracticingPhotography totally agree. Employee education as well as good defence software is also critical in the fight against the bad guys. Being able to detect when something happens is so important. That’s where, at least for Microsoft. The defender suite of tools and Azure Sentinel are also critical. Thanks for the input👏👍

[@arabellazaneanani962]

Can location be tracked and saved by IT admin?

[@AndyMaloneMVP]

Not that I’m aware of. It’s only for logging purposes, ie where you’re logging in from for conditional access purposes.

[@TrainWreck69696]

So it tells me I need a code from them Microsoft app but I’m already in the app how do I find the code

[@AndyMaloneMVP]

The code is displayed at login on your computer. For example 25. Enter it into the authenticator app and click Yes to confirm that it's you.

[@yellow6527]

I have a question, I tried to login to my Microsoft account using Microsoft authenticator and the notifications don't show up, I've reinstalled and offloaded the app, turned off do not disturb mode and other apps that prevent notifications, unblocked contacts, did everything in the Microsoft support website, and did absolutely everything and I still don't recieve the notification? I also have double checked the email and my account and I tried to try again in different devices. Please help?

[@AndyMaloneMVP]

Yours is maybe a tenant that is Microsoft managed. Meaning that Microsoft are currently rolling this feature out.

[@yellow6527]

@@AndyMaloneMVP thank you, but what do i do?

[@AndyMaloneMVP]

@@yellow6527 i’m sorry for your issue. However I am sure you’ll understand. I don’t know the answer to every question. This is clearly a technical support question and I think you should post a question either to Microsoft support or why not try visiting the Microsoft tech community they can really help. Either way I wish you the best of luck. Thanks

[@voswouter87]

How to access the challenge when I already have the app open? It seems that if I miss the notification there's no way to login anymore. This is utterly retarted. I should be able to access the authentication challenge from having the app open.

[@AnnDutko-jq7pb]

How do I get my recovery key?

[@AndyMaloneMVP]

There’s no recovery key for Microsoft Authenticator

[@MrSirensEye]

How do I prevent the Authenticator to know my location or change it to a location of my desire?

[@AndyMaloneMVP]

Admins can disable this element in the authenticator settings in Authentication methods in Azure AD. Think twice though as it really does add an additional layer of security

[@dipsuranjanroul2312]

@andymelonemvp how can I login my account without authenticator app, I lost my phone and I can't log in again.. please help

[@AndyMaloneMVP]

@@dipsuranjanroul2312 there are recovery methods that you can use, including setting up a new MFA device. Check out the documentation on support.microsoft.com

[@MaZEEZaM]

WARNING FLASHING LIGHT in the channel intro at beginning of video

[@Fergo101]

Now if only shared mailboxes worked just like adding a second/third account to outlook we could implement them and have MFA. Users love multiple shared Accounts in outlook and MFA kills the experience.

[@mbutler101]

yeah, been thinking about that too, shared mailboxes and MFA.

[@Quizzical106]

I thought this was a tutorial on the authenticator

[@kabyson]

+

[@daelra]

I'm not a fan of shorts or any portrait-style social media to be honest. Maybe it makes sense if you're talking about a mobile app but for desktop stuff, then the format is all wrong.

[@AndyMaloneMVP]

I partially agree with you, however, there is a pressure from KZbin for creators to produce these from mobile devices, no TVs or laptops. So I figured I’ll give it a go and if I can get a few tips and tricks that users find useful and I’ve accomplish my goal.

[@guyprovost]

"It's more than a numer" ... ? What's a numer ?

[@AndyMaloneMVP]

Number without the b :-D Oops will fix that

[@lightemittingheart1706]

not user friendly and too interfering frustrating

[@Our1stPlanet]

Shorts is all about posers showing of. Often just 1 mS showing the crux of the video would often help immensely, but it doesn't happen. Don't lower yourself to shorts. Believe me It's something you don't have to do.

[@AndyMaloneMVP]

As a KZbinr I’m trying my best to meet the wishes of everyone. The good thing about KZbin is that there are separate tabs for videos and shorts. So if you don’t like shorts then you don’t have to watch them. But after a week of producing shorts which I hope offer real tips rather than silly furry animals. I’ve had positive feedback from many folks. But have no fear I will continue to deliver quality content.

[@marbanak]

I am locked out because of this feature. No happy talk from me. I gotta find a human being to untangle this mess. I am convinced that Microsoft is just a BOT. Authenticator tips online typically start with "Login with your credentials". Well, how does one do that when login is blocked ? The rollout was a sin.