

Latest version of Microsoft Authenticator installed on devices running iOS or Android.įor Android, the device that runs Microsoft Authenticator must be registered to an individual user.

A user has a backup sign-in method even if their device doesn't have connectivity.

The Authenticator app automatically generates codes when set up to do push notifications. Push notifications to your smartphone or tablet help the Authenticator app to prevent unauthorized access to accounts and stop fraudulent transactions. Recommended: Azure AD Multi-Factor Authentication, with push notifications allowed as a verification method. To use passwordless phone sign-in with Microsoft Authenticator, the following prerequisites must be met: Guest accounts aren't supported for multiple account sign-ins from one device. The Azure AD accounts can be in the same tenant or different tenants. By removing the limitation of one user sign-in from a device, admins can more confidently encourage users to register passwordless phone sign-in and use it as their default sign-in method.

Previously, admins might not require passwordless sign-in for users with multiple accounts because it requires them to carry more devices for sign-in. Consultants, students, and others with multiple accounts in Azure AD can add each account to Microsoft Authenticator and use passwordless phone sign-in for all of them from the same iOS device. You can enable passwordless phone sign-in for multiple accounts in Microsoft Authenticator on any supported iOS device.
