Microsoft Entra - How to Trigger an MFA Request with an API

Hill, Austin 45 Reputation points
2024-07-23T14:59:02.7033333+00:00

Is it possible for a custom application to trigger a Microsoft API to prompt the user via email, text, or Microsoft Authenticator to authorize themselves into our application?

We've implemented this using Okta and we're considering moving to Azure, although no documentation has explicitly said this is possible in Entra.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,260 questions
0 comments
Accepted answer
  1. Fabio Andrade 1,500 Reputation points Microsoft Employee
    2024-07-23T23:41:10.7333333+00:00

    Hi @Hill, Austin

    Thanks for reaching out to Microsoft Q&A

    If the custom application or API is registered with Entra (App Registrations), you can create a Conditional Access policy scoping that app and configure the policy to require MFA for all or some users. The documentation below ha smore information about creating such policy for all apps and users, but you can filter it by users and scope it per application as well. Let me know if I'm missing anything:

    https://video2.skills-academy.com/en-us/entra/identity/conditional-access/howto-conditional-access-policy-all-users-mfa

    Thanks,

    Fabio

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Fabio Andrade 1,500 Reputation points Microsoft Employee
    2024-07-26T23:22:54.37+00:00

    Hi @Hill, Austin

    Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

    Thanks,

    Fabio

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.