Azure Multi-Factor Authentication

Azure Multi-Factor Authentication reduces organizational risk and helps enable regulatory compliance by providing an extra level of authentication, in addition to a user’s account credentials, to secure employee, customer, and partner access. Azure Multi-Factor Authentication can be used for both on-premises and cloud applications.

Get security and convenience

Azure Multi-Factor Authentication helps safeguard access to your data and applications while addressing user demand for a simple sign-in process. The service offers enhanced protection from malware threats, and real-time alerts notify your IT department of potentially compromised account credentials. Multi-Factor Authentication delivers strong authentication via a range of easy options, including mobile apps, phone calls, and text messages, allowing users to choose the method that works best for them. Support for multiple methods ensures that users can always be reached for additional authentication.

Add it to on-premises applications

Use the Multi-Factor Authentication Server to enable additional authentication for on-premises applications such as remote access VPNs and web applications, as well as cloud applications using Active Directory Federation Services. Sync with Server Active Directory or another LDAP directory to streamline user management. Run the Multi-Factor Authentication Server on your existing hardware or in a Azure Virtual Machine. Multiple, redundant servers can be configured for high availability and fail-over.

Turn it on for Azure Active Directory (Azure AD)

Use Multi-Factor Authentication to secure access to Azure, Microsoft Online Services like Office 365 and Dynamics CRM Online, and thousands of Non-MS Cloud services preintegrated with Azure AD. Simply enable Multi-Factor Authentication for Azure AD identities, and users will be prompted to set up additional verification the next time they sign in. Azure Multi-Factor Authentication is also included in Azure Active Directory Premium offering.

Build it into your applications

A Software Development Kit (SDK) enables direct integration with your cloud services. Build Multi-Factor Authentication phone call and text message verification methods into your application’s sign-in or transaction processes and leverage your application’s existing user database.

Multi-Factor Authentication for Office 365

Multi-Factor Authentication for Office 365, powered by Azure Multi-Factor Authentication, works exclusively with Office 365 applications at no additional cost and is managed from the Office 365 portal. Multi-Factor Authentication for Office 365 offers a subset of Azure Multi-Factor Authentication capabilities as shown in the following table:

 Multi-Factor Authentication for Office 365Azure Multi-Factor Authentication
Administrators can Enable/Enforce MFA to end-users Yes Yes
Use Mobile app (online and OTP) as second authentication factor Yes Yes
Use Phone call as second authentication factor Yes Yes
Use SMS as second authentication factor Yes Yes
Application passwords for non-browser clients (e.g. Outlook, Lync) Yes Yes
Default Microsoft greetings during authentication phone calls Yes Yes
Custom greetings during authentication phone calls   Yes
Fraud alert   Yes
Security Reports   Yes
MFA for on-premises applications/ MFA Server   Yes
One-Time Bypass   Yes
Block/Unblock Users   Yes
Customizable caller ID for authentication phone calls   Yes
Event Confirmation   Yes

Multi-Factor Authentication for Azure administrators

The same subset of Multi-Factor Authentication capabilities for Office 365 is available at no cost to all Azure administrators. Every administrative account of an Azure subscription can now get additional protection by enabling this core multi-factor authentication functionality via Azure Active Directory service. An administrator that wants to access Azure portal to create a VM, deploy a web site, manage storage, use mobile services or any other Azure Service can add Multi-Factor Authentication to his administrator account.

Next Steps

View pricing details. Browse the documentation center for resources. Explore flexible purchase options.