By Achilleas Eleftheriou – Presales Engineer – Solutions Services
Active Directory (AD) consists of on-premises features included in a Windows Server. These are the Active Directory Domain Services, and the On-premises Active Directory service in which identities, groups, and other objects are stored.
Microsoft Authenticator can be used to sign into any Azure Active Directory account without using a password. This authentication technology can be used on any device platform, including mobile. This technology can also be used with any app or website that integrates with Microsoft Authentication Libraries. To vastly improve the user experience, I would absolutely make the effort to enable Passwordless authentication for Azure AD.
HOW TO ENABLE PASSWORDLESS AZURE AD
Today we’re going to cover exactly how to enable Passwordless authentication so you can answer the age-old question of how to, login to Microsoft Authentication app. This authentication technology can be used on any device platform, including mobile. This technology can also be used with any app or website that integrates with Microsoft Authentication Libraries.
To get Passwordless authentication setup and configured in your environment, there are a couple of items that need to be setup beforehand. Don’t worry, we’ll walk through the entire process to ensure you’re at least beta testing this feature. Here’s an overview.
o If a user has TOTP as their default method, Passwordless authentication will not work.
o To Confirm Device Registration: Open Authenticator → Settings → Device Registration
Configuring Administrative settings for Passwordless authentication:
Let’s follow the below steps:
Then let’s see the client setup and user experience:
Assuming the user is in scope of the policy, let’s review the setup that’s needed as the end-user. It is relatively straight forward, and setup is only needed once per device.
In this way we have successfully enabled Passwordless authentication for Azure AD, to sum up I think this is one of the great features that you should have rolled out to your organization. Most important it is a user friendly and secure.
Azure AD comes in four editions: Free, Office 365 apps, Azure AD Premium P1, and Azure AD Premium P2. IBSCY, as a Microsoft Solutions Partner in Cyprus, can help you choose the right edition for your business as we are certified to sell, install, configure, and maintain all Microsoft Cloud products such as Microsoft Azure.