Navigate to Configuration → Self-Service → Multi-factor Authentication → Authenticators Setup.

Self-update of Active Directory profile information, subscription to mail groups, and employee search using ADSelfService Plus.Įnabling Microsoft Authenticator for MFA can be done using minimal steps in ADSelfService Plus:.

Enterprise application logins through single sign-on (SSO).

Active Directory self-service password reset or account unlock actions via the ADSelfService portal, ADSelfService Plus mobile app, and native Windows/macOS/Linux login screen.

The solution supports 18 authentication methods including Microsoft Authenticator, security questions and answers, TOTP, and YubiKey Authenticator to verify users' identities during: Using an authentication method like Microsoft Authenticator is a secure way to verify a user's identity before permitting them to proceed with a password reset.ĪDSelfService Plus, an Active Directory self-service password management and single sign-on solution, offers a self-service password reset option secured by MFA.

Since users are often not asked the details about the old credentials, their identities must be verified in some other form before they can proceed with self-service password reset. However, it can be risky for admins to allow this option as it might increase the security risk. The help-desk or admin will not be tasked with hundreds of password reset requests and can instead attend to other crucial tasks.Users need not wait for admin or help-desk intervention and can have seamless access to their machines.

Often administrators provide Active Directory domain users with the ability to self-service password resets. Using Microsoft Authenticator for AD-based authentication: While logging in once the user enters the credential, the service asks the user to validate themselves using the the 6-digit TOTP generated on the MS Authenticator app.

You need Microsoft Authenticator app to authenticate using this method. It is often used in combination with authentication methods for multi-factor authentication (MFA) to secure the login process of critical services. Microsoft Authenticator is an authentication method, developed by Microsoft, that uses a time-based one-time-password (TOTP) to verify users identities. Authentication » Microsoft Authenticator for AD Password Reset Configuring Microsoft Authenticator for Active Directory-based actions

Outlook authenticator app