you cannot setup passwordless phone sign in

Click Azure Active Directory under Favorites on the left of the portal window.You can enable combined registration by logging in to Azure AD using a global administrator account. If you have an Azure AD tenant that was provisioned before August 15 th 2020, you’ll need to enable combined registration manually. Beginning August 15 th 2020, all new Azure AD tenants are automatically opted in for combined registration. Combined registration brings together the registration experience for Azure MFA and self-service password reset. The first requirement for passwordless sign-in in Microsoft 365 is that the ‘combined registration’ experience must be enabled in Azure AD. For additional information on passwordless sign-in and why passwords are a security risk, check out Understanding Windows 10 and Microsoft 365 Passwordless Sign-In on Petri. Microsoft is championing passwordless sign-in because it is more convenient for users and it provides a higher level of security than passwords. Multifactor authentication (MFA) is very effective at protecting passwords but it has a low adoption rate. IT departments spend a lot of time managing passwords and recovering from security incidents where password exposure was the root cause. Passwords are a security risk and difficult to manageĪround 80 percent of successful attacks originate from compromised passwords. In this article, I will show you how to let users securely log in to Microsoft 365 using the Microsoft Authenticator app instead of a password.

When passwordless sign-in is enabled in Azure AD, instead of entering a password users can confirm their identity using the Microsoft Authenticator app, a FIDO2 security key, or by SMS message. As the identity management platform used by Microsoft 365, Azure Active Directory (AD) is used to control and manage user access to Microsoft 365 services and apps.

You cannot setup passwordless phone sign in