Benutzer:MovGP0/Azure/Multi-Factor Authentication

aus Wikipedia, der freien Enzyklopädie
Zur Navigation springen Zur Suche springen
   MovGP0        Über mich        Hilfen        Artikel        Weblinks        Literatur        Zitate        Notizen        Programmierung        MSCert        Physik      


Azure Multi-Factor Authentication

[Bearbeiten | Quelltext bearbeiten]
  • Admin can change MFA options (ie. when user lost phone)
  • charged per user, not per SMS
Active Directory Methods
  • Telephone call
    • user gets callback and must enter the number from the call on the screen
    • user gets callback and must enter the number from the screen into the phone
  • SMS to mobile phone
    • user gets code via SMS and enters the code on the screen
  • App password
    • configured using QR-Code or one time code
    • code changes every 30 seconds
  • One time password
    • recovery password when MFA fails (ie. phone got lost)
    • must only be used once
  • App generated time-based code
    • used for apps that do not support MFA
    • one password per app (can be revoked without affecting other apps)
Office 365
  • uses AD only in the backend
  • has custom MFA implementation