Another #MicrosoftTeams feature is rolling out (ok so it’s in public preview so pretty much rolled out).
This time is a feature aimed more at front line workers like retail for example who may oy have a mobile phone to access their busienss apps.
Introducing SMS based user sign-in
With SMS based user sign-in, users can simply sign-in with their phone number and receive a code via SMS, which will then log them in (the number needs to be registered against them in Azure Active Directory).
How’s it works?
Worth noting that this is just in preview and is still some key features missing (a key one being this doesn’t yet work with MFA… But it will).
As I mentioned in the introduction SMS-based authentication, lets users sign in without needing to provide, or even know, their username and password. After their account is created by an identity administrator, they can enter their phone number at the sign-in prompt, and provide an authentication code that’s sent to them via text message. This authentication method simplifies access to applications and services, especially for front line workers.
Whilst this will work for any Office 365, it’s primary aim is to help front line workers use and login to Team in mobile device as the illustration below shows
Each user enabled for SMS-sign in must have one of the following Azure AD or Microsoft 365 licenses:
– Azure AD Premium P1 or P2 or
– Microsoft 365 F1 or F3
Microsoft have clearly detailed a number of limitations which will apply during the public preview including.
- SMS-based authentication isn’t currently compatible with Azure Multi-Factor Authentication.
- With the exception of Teams, SMS-based authentication isn’t currently compatible with native Office applications.
- SMS-based authentication isn’t recommended for B2B accounts.
- Federated users won’t authenticate in the home tenant. They only authenticate in the cloud.
To learn more and for instructions in how to active and configure SMS sign in, see the Microsoft supporting information here.
Other Azure AD Passwordless options.
For additional ways to sign in to Azure AD without a password, such as the Microsoft Authenticator App or FIDO2 security keys, you can review the Passwordless authentication options for Azure AD.