Skip to content

Commit d29e838

Browse files
Merge pull request #229298 from Justinha/sys-mfa
Update concept-system-preferred-multifactor-authentication.md
2 parents a1975cb + 2d42ee3 commit d29e838

File tree

1 file changed

+2
-8
lines changed

1 file changed

+2
-8
lines changed

articles/active-directory/authentication/concept-system-preferred-multifactor-authentication.md

Lines changed: 2 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to use system-preferred multifactor authentication
44
ms.service: active-directory
55
ms.subservice: authentication
66
ms.topic: conceptual
7-
ms.date: 02/28/2023
7+
ms.date: 03/02/2023
88
ms.author: justinha
99
author: justinha
1010
manager: amycolannino
@@ -85,7 +85,7 @@ Content-Type: application/json
8585

8686
## Known issues
8787

88-
- [FIDO2 security key isn't supported on iOS mobile devices](../develop/support-fido2-authentication.md#mobile). This issue might surface when system-preferred MFA is enabled. Until a fix is available, we recommend not using FIDO2 security keys on iOS devices.
88+
- [FIDO2 security key isn't supported on mobile devices](../develop/support-fido2-authentication.md#mobile). This issue might surface when system-preferred MFA is enabled. Until a fix is available, we recommend not using FIDO2 security keys on mobile devices.
8989

9090
## Common questions
9191

@@ -115,12 +115,6 @@ When a user signs in, the authentication process checks which authentication met
115115

116116
System-preferred MFA doesn't affect users who sign in by using Active Directory Federation Services (AD FS) or Network Policy Server (NPS) extension. Those users don't see any change to their sign-in experience.
117117

118-
### What if the most secure MFA method isn't available?
119-
120-
If the user doesn't have that have the most secure method available, they can sign in with another method. After sign-in, they're redirected to their Security info page to remove the registration of the authentication method that isn't available.
121-
122-
For example, let's say an end user misplaces their FIDO2 security key. When they try to sign in without their security key, they can click **I can't use my security key right now** and continue to sign in by using another method, like a time-based one-time password (TOTP). After sign-in, their Security info page appears and they need to remove their FIDO2 security key registration. They can register the method again later if they find their FIDO2 security key.
123-
124118
### What happens for users who aren't specified in the Authentication methods policy but enabled in the legacy MFA tenant-wide policy?
125119

126120
The system-preferred MFA also applies for users who are enabled for MFA in the legacy MFA policy.

0 commit comments

Comments
 (0)