security defaults how does it deal with older MFA users without Authenticator app

Wonho Lee 1 Reputation point
2020-10-05T07:33:00.94+00:00

Hi,

I am in the middle of enabling Security defaults in a small business. We have previously enabled MFA for some portion of users, mostly using sms verification method.

Now that we have enabled security defaults, I wonder what would happen to these users if they don't register the app for additional verification method? If you have registered to MFA without the app, do you get prompted to updated the method? My understanding is that security defaults doesn't support other verfication method than Authenticator app.

One other thing is that, is there a way to check status of users who have enabled MFA required for security defaults?

Thanks in advance!

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,426 Reputation points
    2020-10-05T18:57:26.627+00:00

    Previously MFA enabled users will continue to user their selected auth methods, even SMS.

    You can identity users who have registered for MFA using the MSOnline powershell module. 

       Get-MsolUser -All | where {$_.StrongAuthenticationMethods -ne $null} | Select-Object -Property UserPrincipalName

    --
    Please let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.

    0 comments