Microsoft hands Entra ID users new option for MFA – Help Net Security

Organizations rely on MFA to enforce identity checks before granting access to systems and services. Microsoft has made external MFA generally available in Microsoft Entra ID, expanding support for third-party identity providers.

Configure external MFA in Microsoft Entra ID (Source: Microsoft)

External MFA supports organizations that use third-party MFA solutions to meet regulatory or business requirements, handle scenarios such as mergers and acquisitions, or maintain a consistent MFA approach within Microsoft Entra ID. Built on the OpenID Connect (OIDC) standard, it enables integration of a preferred MFA provider while maintaining Conditional Access and policy enforcement.

Once configured, the external method becomes part of the tenant’s authentication methods policy as an external authentication method configuration. Administrators can assign it to specific user groups, including or excluding groups as needed, and manage it alongside built-in authentication…