You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/authentication/concept-authentication-methods.md
+5-1Lines changed: 5 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -44,6 +44,7 @@ The following table outlines the security considerations for the available authe
44
44
| Certificate-based authentication | High | High | High |
45
45
| OATH hardware tokens (preview) | Medium | Medium | High |
46
46
| OATH software tokens | Medium | Medium | High |
47
+
| Temporary Access Pass (TAP) | Medium | High | High |
47
48
| SMS | Medium | High | Medium |
48
49
| Voice | Medium | Medium | Medium |
49
50
| Password | Low | High | High |
@@ -72,9 +73,10 @@ The following table outlines when an authentication method can be used during a
72
73
| Certificate-based authentication | Yes | No |
73
74
| OATH hardware tokens (preview) | No | MFA and SSPR |
74
75
| OATH software tokens | No | MFA and SSPR |
76
+
| Temporary Access Pass (TAP) | Yes | MFA |
75
77
| SMS | Yes | MFA and SSPR |
76
78
| Voice call | No | MFA and SSPR |
77
-
| Password | Yes ||
79
+
| Password | Yes |No|
78
80
79
81
> \* Windows Hello for Business, by itself, does not serve as a step-up MFA credential. For example, an MFA Challenge from Sign-in Frequency or SAML Request containing forceAuthn=true. Windows Hello for Business can serve as a step-up MFA credential by being used in FIDO2 authentication. This requires users to be enabled for FIDO2 authentication to work successfully.
80
82
@@ -88,6 +90,7 @@ To learn more about how each authentication method works, see the following sepa
0 commit comments