Microsoft Entra ID helps an extended record of Authentication strategies.
- Home windows Good day for Enterprise
- Microsoft Authenticator app
- Authenticator Lite
- Passkey (FIDO2)
- Certificates-based authentication
- {Hardware} OATH tokens (preview)
- Software program OATH tokens
- Exterior authentication strategies (preview)
- Short-term Entry Move (TAP)
- Quick Message Service (SMS) sign-in and verification
- Voice name verification
- Password
This allows organizations to pick out essentially the most safe and productive authentication strategies for his or her enterprise. Whereas essentially the most safe technique might not all the time be the most efficient, and vice versa, having a wide range of supported authentication strategies helps to strike a stability between these two facets.
Microsoft Entra ID now helps QR authentication, a way particularly designed for frontline staff who use shared units. This gives a handy and safe login expertise for these staff.
1) An account with Authentication Coverage Administrator permission or increased can allow QR code as an authentication technique.
2) As soon as the tactic is enabled, a QR code and short-term PIN might be generated for the person.
3) The QR code ought to be made out there to the person. It may be downloaded, printed, or added to a badge.
4) The QR code is exclusive however can’t be used with out the PIN.
5) The short-term PIN should be reset when the person authenticates for the primary time.
6) As soon as the QR code and PIN are arrange, the person can use them for subsequent logins.
1) QR authentication is designed for frontline staff and shouldn’t be extensively used. Phishing-resistant authentication is advisable wherever potential.
2) Don’t allow this authentication technique for all customers; solely allow it for required customers.
3) QR authentication is at present solely supported on cellular units operating iOS/iPadOS or Android.
4) QR authentication doesn’t permit self-service PIN reset for customers.
On this weblog submit I’m going to reveal methods to configure QR authentication for the Microsoft Entra ID customers.
Let’s begin with enabling authentication technique.
- Log in to the Entra admin portal at https://entra.microsoft.com/as an Authentication Coverage Administrator or increased.
- Navigate to Safety | Authentication Strategies.
- Beneath Insurance policies, click on on QR code (Preview).
- Within the QR code (Preview) settings web page, click on on Allow to activate the authentication technique. Then, choose the related person group because the goal.
- Click on on the Configure tab. Right here, you possibly can alter the PIN size and the lifetime of the QR code. The default is twelve months, however it may be prolonged as much as 395 days. As soon as modifications are made, click on on Save to use them.
This allows the QR code as an authentication technique for the tenant. Subsequent, let’s examine methods to generate a QR code for a person.
To generate QR code for person,
- Navigate to Customers | All customers.
- Choose the person from the goal group configured within the earlier part.
- Click on on Authentication strategies.
- Click on on + Add authentication technique.
- From the dropdown, choose QR code (Preview).
- Within the settings web page, outline the expiration date and activation time. Click on on Generate PIN to create a brief PIN. Notice down the PIN and click on on Add.
- This can generate the QR code. Obtain it to be used with authentication.
Now that we’ve generated a QR code for a person, let’s proceed with some testing.
For testing, I used an iOS machine to log in to the workplace portal. On the login web page, I typed the username after which clicked on Signal-in choices.
Within the Signal-in choices web page, I chosen Register to a company.
On the subsequent web page, I selected Register with QR code.
I clicked on Permit to grant entry to the digital camera.
After that, I scanned the QR code downloaded within the earlier step.
As soon as the QR code was efficiently detected, I entered the short-term PIN that was generated and clicked on Register.
On the subsequent web page, I used to be prompted to outline a brand new PIN since this was the primary login. After defining the PIN, I clicked on Register.
As anticipated, I used to be in a position to log in efficiently.
This marks the tip of the weblog submit, and I consider you now have a greater understanding of methods to allow and use QR code for authentication.