You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Configure and enable users for SMS-based authentication using Azure Active Directory
19
19
20
-
To simplify and secure sign-in to applications and services, Azure Active Directory (Azure AD) provides multiple authentication options. SMS-based authentication lets users sign-in without providing, or even knowing, their user name and password. After their account is created by an identity administrator, they can enter their phone number at the sign-in prompt. They receive an authentication code via text message that they can provide to complete the sign-in. This authentication method simplifies access to applications and services, especially for Frontline workers.
20
+
To simplify and secure sign-in to applications and services, Azure Active Directory (Azure AD) provides multiple authentication options. SMS-based authentication lets users sign-in without providing, or even knowing, their user name and password. After their account is created by an identity administrator, they can enter their phone number at the sign-in prompt. They receive an SMS authentication code that they can provide to complete the sign-in. This authentication method simplifies access to applications and services, especially for Frontline workers.
21
21
22
22
This article shows you how to enable SMS-based authentication for select users or groups in Azure AD. For a list of apps that support using SMS-based sign-in, see [App support for SMS-based authentication](how-to-authentication-sms-supported-apps.md).
23
23
@@ -30,7 +30,7 @@ To complete this article, you need the following resources and privileges:
30
30
* An Azure Active Directory tenant associated with your subscription.
31
31
* If needed, [create an Azure Active Directory tenant][create-azure-ad-tenant] or [associate an Azure subscription with your account][associate-azure-ad-tenant].
32
32
* You need *global administrator* privileges in your Azure AD tenant to enable SMS-based authentication.
33
-
* Each user that's enabled in the text message authentication method policy must be licensed, even if they don't use it. Each enabled user must have one of the following Azure AD, EMS, Microsoft 365 licenses:
33
+
* Each user that's enabled in the SMS authentication method policy must be licensed, even if they don't use it. Each enabled user must have one of the following Azure AD, EMS, Microsoft 365 licenses:
34
34
*[Microsoft 365 F1 or F3][m365-firstline-workers-licensing]
35
35
*[Azure Active Directory Premium P1 or P2][azure-ad-pricing]
36
36
*[Enterprise Mobility + Security (EMS) E3 or E5][ems-licensing] or [Microsoft 365 E3 or E5][m365-licensing]
@@ -62,26 +62,24 @@ First, let's enable SMS-based authentication for your Azure AD tenant.
62
62
1. Sign-in to the [Azure portal](https://portal.azure.com) using an account with *global administrator* permissions.
63
63
1. Search for and select **Azure Active Directory**, then choose **Security** from the menu on the left-hand side.
64
64
1. Under the **Manage** menu header, select **Authentication methods** > **Policies**.
65
-
1. From the list of available authentication methods, select **Text message**.
65
+
1. From the list of available authentication methods, select **SMS**.
66
66
67
-

67
+

68
68
69
69
70
-
1.Set**Enable**to *Yes*. Then select the **Target users**.
70
+
1.Click**Enable**and select **Target users**. You can choose to enable SMS-based authentication for *All users* or *Select users* and groups.
71
71
72
-

73
-
74
-
You can choose to enable SMS-based authentication for *All users* or *Select users* and groups. In the next section, you enable SMS-based authentication for a test user.
72
+

75
73
76
74
## Assign the authentication method to users and groups
77
75
78
76
With SMS-based authentication enabled in your Azure AD tenant, now select some users or groups to be allowed to use this authentication method.
79
77
80
-
1. In the text message authentication policy window, set **Target** to *Select users*.
78
+
1. In the SMS authentication policy window, set **Target** to *Select users*.
81
79
1. Choose to **Add users or groups**, then select a test user or group, such as *Contoso User* or *Contoso SMS Users*.
82
80
1. When you've selected your users or groups, choose **Select**, then **Save** the updated authentication method policy.
83
81
84
-
Each user that's enabled in the text message authentication method policy must be licensed, even if they don't use it. Make sure you have the appropriate licenses for the users you enable in the authentication method policy, especially when you enable the feature for large groups of users.
82
+
Each user that's enabled in SMS authentication method policy must be licensed, even if they don't use it. Make sure you have the appropriate licenses for the users you enable in the authentication method policy, especially when you enable the feature for large groups of users.
85
83
86
84
## Set a phone number for user accounts
87
85
@@ -116,9 +114,9 @@ To test the user account that's now enabled for SMS-based sign-in, complete the
116
114
117
115

118
116
119
-
1.A text message is sent to the phone number provided. To complete the sign-in process, enter the 6-digit code provided in the text message at the sign-in prompt.
117
+
1.An SMS message is sent to the phone number provided. To complete the sign-in process, enter the 6-digit code provided in the SMS message at the sign-in prompt.
120
118
121
-

119
+

122
120
123
121
1. The user is now signed in without the need to provide a username or password.
124
122
@@ -142,7 +140,7 @@ For more information on the end-user experience, see [SMS sign-in user experienc
142
140
If you receive an error when you try to set a phone number for a user account in the Azure portal, review the following troubleshooting steps:
143
141
144
142
1. Make sure that you're enabled for the SMS-based sign-in.
145
-
1. Confirm that the user account is enabled in the *Text message* authentication method policy.
143
+
1. Confirm that the user account is enabled in the **SMS** authentication method policy.
146
144
1. Make sure you set the phone number with the proper formatting, as validated in the Azure portal (such as *+1 4251234567*).
147
145
1. Make sure that the phone number isn't used elsewhere in your tenant.
148
146
1. Check there's no voice number set on the account. If a voice number is set, delete and try to the phone number again.
0 commit comments