Skip to content

Commit f6df998

Browse files
committed
EOTP enabled by default
1 parent 1a58b80 commit f6df998

File tree

1 file changed

+9
-29
lines changed

1 file changed

+9
-29
lines changed

articles/active-directory/external-identities/one-time-passcode.md

Lines changed: 9 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -75,53 +75,33 @@ At the time of invitation, there's no indication that the user you're inviting w
7575

7676
Guest user [email protected] is invited to Fabrikam, which doesn't have Google federation set up. Teri doesn't have a Microsoft account. They'll receive a one-time passcode for authentication.
7777

78-
## Enable email one-time passcode
79-
80-
1. Sign in to the [Azure portal](https://portal.azure.com/) as an Azure AD global administrator.
81-
82-
1. In the navigation pane, select **Azure Active Directory**.
83-
84-
1. Select **External Identities** > **All identity providers**.
85-
86-
1. Select **Email one-time passcode** to open the configuration pane.
87-
88-
1. Under **Email one-time passcode for guests**, select one of the following:
89-
90-
- **Automatically enable email one-time passcode for guests starting October 2021** if you don't want to enable the feature immediately and want to wait for the automatic enablement date.
91-
- **Enable email one-time passcode for guests effective now** to enable the feature now.
92-
- **Yes** to enable the feature now if you see a Yes/No toggle (this toggle appears if the feature was previously disabled).
93-
94-
![Screenshots showing Email one-time passcode toggle enabled.](media/one-time-passcode/enable-email-otp-options.png)
95-
96-
1. Select **Save**.
97-
98-
> [!NOTE]
99-
> Email one-time passcode settings can also be configured with the [emailAuthenticationMethodConfiguration](/graph/api/resources/emailauthenticationmethodconfiguration) resource type in the Microsoft Graph API.
100-
101-
## Disable email one-time passcode
78+
## Enable or disable email one-time passcodes
10279

10380
The email one-time passcode feature is now turned on by default for all new tenants and for any existing tenants where you haven't explicitly turned it off. This feature provides a seamless fallback authentication method for your guest users. If you don't want to use this feature, you can disable it, in which case users will be prompted to create a Microsoft account.
10481

10582
> [!NOTE]
10683
>
107-
> If the email one-time passcode feature has been enabled in your tenant and you turn it off, any guest users who have redeemed a one-time passcode will not be able to sign in. You can [reset their redemption status](reset-redemption-status.md) so they can sign in again using another authentication method.
84+
> - Email one-time passcode settings can also be configured with the [emailAuthenticationMethodConfiguration](/graph/api/resources/emailauthenticationmethodconfiguration) resource type in the Microsoft Graph API.
85+
> - If the email one-time passcode feature has been enabled in your tenant and you turn it off, any guest users who have redeemed a one-time passcode will not be able to sign in. You can [reset their redemption status](reset-redemption-status.md) so they can sign in again using another authentication method.
10886
109-
### To disable the email one-time passcode feature
87+
### To enable or disable email one-time passcodes
11088

11189
1. Sign in to the [Azure portal](https://portal.azure.com/) as an Azure AD global administrator.
11290

11391
1. In the navigation pane, select **Azure Active Directory**.
11492

11593
1. Select **External Identities** > **All identity providers**.
11694

117-
1. Select **Email one-time passcode**. Under **Email one-time passcode for guests**, the toggle is set to **Yes** unless you've explicitly turned it off. If you want to disable it, select **No**.
95+
1. Select **Email one-time passcode**.
96+
97+
1. Under **Email one-time passcode for guests**, select one of the following:
98+
- **Yes**: The toggle is set to **Yes** by default unless the feature has been explicitly turned it off. To enable the feature, make sure **Yes** is selected.
99+
- **No**: If you want to disable the email one-time passcode feature, select **No**.
118100

119101
![Screenshots showing the Email one-time passcode toggle.](media/one-time-passcode/email-one-time-passcode-toggle.png)
120102

121103
1. Select **Save**.
122104

123-
For more information about current limitations, see [Azure AD B2B in government and national clouds](b2b-government-national-clouds.md).
124-
125105
## Frequently asked questions
126106

127107
**What happens to my existing guest users if I enable email one-time passcode?**

0 commit comments

Comments
 (0)