check before: 2023-03-17
Product:
Azure Active Directory, Entra, Entra ID, Graph API, Microsoft Graph, Priva
Platform:
Developer, World tenant
Status:
Change type:
Admin impact, Updated message, User impact
Links:
Details:
Updated April 6, 2023: We have updated the content with additional information. Thank you for your patience.
Today, various authentication methods are employed by users to provide varying levels of security. Depending on the situation, certain methods may be more secure than others, so it is important to have a range of options available to ensure the right level of security is provided.
Today we are announcing our solution for this challenge: System-preferred authentication for MFA –where we will evaluate at runtime, which is the most secure method for the user, of the methods the user has registered. This will help us move away from the erstwhile concept of the user selecting a ‘default’ method and always being prompted for that method first, even when more secure methods are registered and available.
[When this will happen:]
Public Preview: We will begin rolling out on March 1st, 2023.
Change Category:
XXXXXXX ...
Scope:
XXXXXXX ...
Release Phase:
Created:
2023-03-04
updated:
2023-04-07
the free basic plan is required to see all details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
changes*
Date | Property | old | new |
2023-04-07 | MC MessageTagNames | User impact, Admin impact | Updated message, User impact, Admin impact |
2023-04-07 | MC Last Updated | 03/03/2023 23:32:43 | 2023-04-06T21:45:03Z |
2023-04-07 | MC Messages | Today, various authentication methods are employed by users to provide varying levels of security. Depending on the situation, certain methods may be more secure than others, so it is important to have a range of options available to ensure the right level of security is provided.
Today we are announcing our solution for this challenge: System-preferred authentication for MFA –where we will evaluate at runtime, which is the most secure method for the user, of the methods the user has registered. This will help us move away from the erstwhile concept of the user selecting a ‘default’ method and always being prompted for that method first, even when more secure methods are registered and available. [When this will happen:] Public Preview: We will begin rolling out on March 1st, 2023. | Updated April 6, 2023: We have updated the content with additional information. Thank you for your patience.
Today, various authentication methods are employed by users to provide varying levels of security. Depending on the situation, certain methods may be more secure than others, so it is important to have a range of options available to ensure the right level of security is provided. Today we are announcing our solution for this challenge: System-preferred authentication for MFA –where we will evaluate at runtime, which is the most secure method for the user, of the methods the user has registered. This will help us move away from the erstwhile concept of the user selecting a ‘default’ method and always being prompted for that method first, even when more secure methods are registered and available. [When this will happen:] Public Preview: We will begin rolling out on March 1st, 2023. |
2023-04-07 | MC How Affect | In this feature, “System preferred multi-factor authentication method,” Microsoft will decide and prompt which among the user’s registered methods should be prompted for 2nd factor. This would be decided on run time and would be the best method of the methods registered at that given point in time.
This feature will be off by default, please enable this feature using MSGraph API. Once enabled, users will be required to sign in using the most preferred authentication method available. This is an excellent approach for users to move away from the less secure telephony methods. Presently the feature is in Private preview and the admins have the control to turn the feature On/Off using GraphAPI. The public preview experience will be similar to the private preview where the admins will use the GraphAPI to turn on/off the feature. By the end of March, the admin screen will be available to the user. There would be a toggle available to configure the feature At GA (in April), Microsoft managed will be set to "enable". Admins will have the UX and the toggle available At GA+3 months (July), the toggle will be taken away from them and the feature will be enabled for all by default. | In this feature, “System preferred multi-factor authentication method,” Microsoft will decide and prompt which among the user’s registered methods should be prompted for 2nd factor. This would be decided on run time and would be the best method of the methods registered at that given point in time.
This feature will be off by default, please enable this feature using MSGraph API. Once enabled, users will be required to sign in using the most preferred authentication method available. This is an excellent approach for users to move away from the less secure telephony methods. Presently the feature is in Private preview and the admins have the control to turn the feature On/Off using GraphAPI. The public preview experience will be similar to the private preview where the admins will use the GraphAPI to turn on/off the feature. By the end of March, the admin screen will be available to the user. There would be a toggle available to configure the feature At GA (in April), Microsoft managed will be set to "disable". Admins will have the UX and the toggle available At GA+2 months (June), Microsoft managed will be set to "enable". The toggle will be available At GA+ 6 months (October) Toggle will be taken away from the users and the feature will be enabled for all by default |
2023-04-07 | MC Title | Announcing Public preview - System preferred multi-factor authentication method | (Updated) Announcing Public preview - System preferred multi-factor authentication method |
2023-04-07 | MC End Time | 08/31/2023 09:00:00 | 2023-10-31T08:00:00Z |
*starting April 2022
Last updated 4 months ago