Multi-Factor Authentication is a way when a user is prompted for an additional form of identification during the sign-in process, which may be a code on their phone or a fingerprint scan.

If any user only uses a password to authenticate his/ her account, may be it leaves an insecure vector for attack. If the password is weak or exposed, the hacker could be using it to gain access. If a user requires a second form of authentication, the security will be increased due to this additional factor, and it is not easy for any hacker to have any access to the user account.

Azure Multi-Factor Authentication follows the authentication methods:

• Typically it can be a password.
• Can be a trusted device, like a phone or hardware key.
• Can be a fingerprint or face scan (biometrics).

Available verification methods for users:

To implement Multi-Factor Authentication, the following additional forms of verification may be used.

• Microsoft Authenticator (App)
• Windows Hello for Business
• FIDO2 Security Key
• OATH Hardware/ Software Token
• SMS/ Voice Call