Thanks for your suggestion. This is under review and in our backlog but initially you will see this capability show up in AD FS in Windows Server 2016.
/ Brjann Brekkan
I agree with Peter. Our managers are asking device-level authentication with Azure MFA without the need of ADFS.
71 votes3 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
There is indeed a big need for this in Enterprises:
- Landlines numbers are not common anymore. People have flex places.
- Not all employees have a mobile device (smartphone) or want to use it for work.
- Companies do not want to invest in hardware oAuth devices like Yubikeys, cause they already purchased Azure MFA!
- Under certain conditionals the Desktop Authenticator app should be allowed for MFA requests.
This is a scenario we are looking to support in the future however, it is not on our immediate roadmap for the next 6 months. Please continue voting and we will evaluate at a later date.
211 votes26 comments · Azure Active Directory » Self-Service Password Reset · Flag idea as inappropriate… · Admin →
Hi folks – apologies for the lack of updates here. This work is still in progress but unfortunately we don’t have an ETA that we can share yet. We will update as soon as we do. Thanks!
This is currently in planning for enabling it for Azure AD joined devices, NOT for AAD DS
Azure Active Directory joined windows 10 machines + 10 :-)