Authenticator number matching to be enabled for all Microsoft Authenticator users

Microsoft has announced that it will be enabling number matching for all users of the Microsoft Authenticator app, beginning February 27, 2023. This critical security feature helps prevent accidental approvals by requiring users to enter a number displayed on the sign-in screen when approving an MFA request within the app. This is an important step to protect against MFA fatigue attacks, which are on the rise. Admins can also enable additional context in Authenticator notifications, including application and geographic location context, to reduce accidental approvals.

After February 27, 2023, authentication flows will require users to do number matching when using the Microsoft Authenticator app, and if the user is using an outdated version of the app that doesn’t support number matching, their authentication will fail. Self Service Password Reset and combined registration flows will also require number matching, and the ADFS adapter will require number matching on versions of Windows Server that support it. NPS extension versions beginning 1.2.2131.2 will also require users to do number matching after February 27, 2023.

The post Authenticator number matching to be enabled for all Microsoft Authenticator users originally appeared on M365 Admin.