Skip to content

Commit f983160

Browse files
Merge pull request #252996 from tilarso/patch-59
Update concept-authentication-methods.md
2 parents 1d5f7b9 + 11bdba5 commit f983160

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

articles/active-directory/authentication/concept-authentication-methods.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,7 @@ The following table outlines the security considerations for the available authe
4444
| Certificate-based authentication | High | High | High |
4545
| OATH hardware tokens (preview) | Medium | Medium | High |
4646
| OATH software tokens | Medium | Medium | High |
47+
| Temporary Access Pass (TAP) | Medium | High | High |
4748
| SMS | Medium | High | Medium |
4849
| Voice | Medium | Medium | Medium |
4950
| Password | Low | High | High |
@@ -72,9 +73,10 @@ The following table outlines when an authentication method can be used during a
7273
| Certificate-based authentication | Yes | No |
7374
| OATH hardware tokens (preview) | No | MFA and SSPR |
7475
| OATH software tokens | No | MFA and SSPR |
76+
| Temporary Access Pass (TAP) | Yes | MFA |
7577
| SMS | Yes | MFA and SSPR |
7678
| Voice call | No | MFA and SSPR |
77-
| Password | Yes | |
79+
| Password | Yes | No |
7880

7981
> \* Windows Hello for Business, by itself, does not serve as a step-up MFA credential. For example, an MFA Challenge from Sign-in Frequency or SAML Request containing forceAuthn=true. Windows Hello for Business can serve as a step-up MFA credential by being used in FIDO2 authentication. This requires users to be enabled for FIDO2 authentication to work successfully.
8082
@@ -88,6 +90,7 @@ To learn more about how each authentication method works, see the following sepa
8890
* [Certificate-based authentication](concept-certificate-based-authentication.md)
8991
* [OATH hardware tokens (preview)](concept-authentication-oath-tokens.md#oath-hardware-tokens-preview)
9092
* [OATH software tokens](concept-authentication-oath-tokens.md#oath-software-tokens)
93+
* [Temporary Access Pass (TAP)](howto-authentication-temporary-access-pass.md)
9194
* [SMS sign-in](howto-authentication-sms-signin.md) and [verification](concept-authentication-phone-options.md#mobile-phone-verification)
9295
* [Voice call verification](concept-authentication-phone-options.md)
9396
* Password
@@ -127,5 +130,6 @@ To review what authentication methods are in use, see [Microsoft Entra multifact
127130
<!-- INTERNAL LINKS -->
128131
[tutorial-sspr]: tutorial-enable-sspr.md
129132
[tutorial-azure-mfa]: tutorial-enable-azure-mfa.md
133+
[tutorial-tap]: howto-authentication-temporary-access-pass.md
130134
[concept-sspr]: concept-sspr-howitworks.md
131135
[concept-mfa]: concept-mfa-howitworks.md

0 commit comments

Comments
 (0)