Combined MFA and password reset registration is now generally available

Published Apr 16 2020 09:00 AM 57.6K Views

Howdy folks,

 

Today we’re announcing that the combined security information registration is now generally available. This new experience makes it easy for users to register for Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR) in a simple step-by-step process. Your feedback from the private and public previews has been awesome, and we’ve used it to make this experience even better for end users.

 

Robyn Hicock, who managed this feature, wrote a guest blog post where she dives into the details on this update. You’ll find her blog post below.

 

As always, we’d love to hear any feedback or suggestions you may have. Please let us know what you think in the comments below or on the Azure AD feedback forum.

 

Best regards,

Alex Simons (@Alex_A_Simons)

Corporate VP of Program Management

Microsoft Identity Division

 

------------------------------------------------

 

Hi everyone,

 

As organizations are asking employees to work from home to slow the spread of COVID-19, it’s even more important that users are registered for MFA and SSPR. We want to make it easier for remote workers to keep their accounts secure.


One of the most common pieces of feedback we received was that the registration experience needs to be super easy on mobile devices. Now, when users register while signing in on their phone, they’ll see this easy step-by-step experience:

 

mobile1.PNG mobile2.PNG
mobile3.PNG mobile4.PNG
mobile5.PNG

 

mobile6.PNG

 

We simplified the web experience too! Here’s what that looks like:

 

web1.PNG

 

web2.PNG

 

Once a user completes registration, they’ll see an overview of what they registered to confirm the information is correct and then they’re back to work!

 

web3.PNG

 

To learn more about the enhanced security info registration experience, check out our admin documentation and user documentation.

 

Managing Security Info

 

From the Security info page, users can easily change their default authentication method or update security info such as their phone number. From here they can also add, delete, or change a method.

 

securityinfo1.png

 

Here’s a quick video about how to manage your security information:

 

 

From this page users can also add a security key:

securityinfo2.png

 

securityinfo3.png

 

To learn more about security keys, check out our previous blog about Azure AD support for FIDO2-based passwordless sign-in.

 

Conditional Access for Registration

 

As part of this update, we’re making Conditional Access for the combined MFA and password reset registration experience generally available too! This helps ensure it’s the right user—not an attacker—registering this sensitive info. To learn more, check out our previous blog about Conditional Access for the combined MFA and SSPR registration experience.

 

CA for registering.png

 

Try It Out!

 

Even though MFA/SSPR Combined Registration is now generally available, we aren’t automatically switching everyone over to the new user experience. We want to give you the control over when you update your end user experiences. This gives you more time to test it out, update training materials, and notify your end users. To enable the enhanced security info registration experience, follow these steps:

  • Sign into the Azure portal as a global administrator or user administrator.
  • Browse to Azure Active Directory > User settings > Manage settings for access panel preview features.
  • Under Users you can use the preview features for registering and managing security info – enhanced, you can choose to enable for a Selected group of users or for All users.

opt in.PNG

 

If you're still using the old experiences for registering for MFA and SSPR, start making plans to move to this awesome new experience. We’d love to hear your feedback and suggestions. Please let us know what you think in the comments below or on the Azure AD feedback forum.

Thanks!

 

Robyn Hicock (@RobynHicock)

Senior Program Manager

Microsoft Identity Security and Protection Team

81 Comments
Version history
Last update:
‎Jul 24 2020 01:12 AM
Updated by:
www.000webhost.com