Merge pull request #228084 from vimrang/patch-23

Update concept-certificate-based-authentication-technical-deep-dive.md

Author: prmerger-automator[bot]

articles/active-directory/authentication/concept-certificate-based-authentication-technical-deep-dive.md

@@ -74,30 +74,24 @@ Now we'll walk through each step:
 
 ## Certificate-based authentication is MFA capable
 
-Azure AD CBA is an MFA (Multi factor authentication) capable method, that is Azure AD CBA can be either Single (SF) or Multi-factor (MF) depending on the tenant configuration. Enabling CBA for a user indicates the user is potentially capable of MFA. This means a user may need additional configuration to proof up to register other authentication methods when the user is in scope for CBA. 
+Azure AD CBA is an MFA (Multi factor authentication) capable method, that is Azure AD CBA can be either Single (SF) or Multi-factor (MF) depending on the tenant configuration. Enabling CBA for a user indicates the user is potentially capable of MFA. This means a user may need additional configuration to get MFA and proof up to register other authentication methods when the user is in scope for CBA.
 
-This can happen when: 
-
-If CBA enabled user only has a Single Factor (SF) certificate
-	To unblock user:
-	1. Use Password + SF certificate.
+If CBA enabled user only has a Single Factor (SF) certificate and need MFA
+   1. Use Password + SF certificate.
    1. Issue Temporary Access Pass (TAP)
    1. Admin adds Phone Number to user account and allows Voice/SMS method for user.
 
-If CBA enabled user but has not yet been issued a certificate
-   To unblock user:
+If CBA enabled user has not yet been issued a certificate and need MFA
    1. Issue Temporary Access Pass (TAP)
    1. Admin adds Phone Number to user account and allows Voice/SMS method for user.
 
-If CBA enabled user cannot use MF cert (such as on mobile device without smart card support)
-   To unblock user: 
+If CBA enabled user cannot use MF cert (such as on mobile device without smart card support) and need MFA
    1. Issue Temporary Access Pass (TAP)
    1. User Register another MFA method (when user can use MF cert)
    1. Use Password + MF cert (when user can use MF cert)
    1. Admin adds Phone Number to user account and allows Voice/SMS method for user
 
 
-
 ## MFA with Single-factor certificate-based authentication
 
 Azure AD CBA can be used as a second factor to meet MFA requirements with single-factor certificates. The supported combintaions are