You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Customer intent: As an identity administrator, I want to understand how to use OATH tokens in Azure AD to improve and secure user sign-in events.
18
18
---
19
+
19
20
# Authentication methods in Azure Active Directory - OATH tokens
20
21
21
22
OATH TOTP (Time-based One Time Password) is an open standard that specifies how one-time password (OTP) codes are generated. OATH TOTP can be implemented using either software or hardware to generate the codes. Azure AD doesn't support OATH HOTP, a different code generation standard.
@@ -48,7 +49,7 @@ Once tokens are acquired they must be uploaded in a comma-separated values (CSV)
> Make sure you include the header row in your CSV file.
@@ -61,9 +62,11 @@ Once any errors have been addressed, the administrator then can activate each ke
61
62
62
63
Users may have a combination of up to five OATH hardware tokens or authenticator applications, such as the Microsoft Authenticator app, configured for use at any time. Hardware OATH tokens cannot be assigned to guest users in the resource tenant.
63
64
64
-
.[!IMPORTANT]
65
-
>Make sure to only assign each token to a single user.
66
-
>In the future, support for the assignment of a single token to multiple users will stop to prevent a security risk.
65
+
> [!IMPORTANT]
66
+
> Make sure to only assign each token to a single user.
67
+
> In the future, support for the assignment of a single token to multiple users will stop to prevent a security risk.
68
+
69
+
67
70
68
71
69
72
## Determine OATH token registration type in mysecurityinfo
Learn more about configuring authentication methods using the [Microsoft Graph REST API](/graph/api/resources/authenticationmethods-overview).
81
85
Learn about [FIDO2 security key providers](concept-authentication-passwordless.md#fido2-security-key-providers) that are compatible with passwordless authentication.
0 commit comments