In this post, I will explain how a normal Azure AD user can change their Azure AD authentication phone number from the MyApps portal.
MFA is a Multi-Factor Authentication to increase security. When you sign in with your password, you must also respond from a registered device (Authentication Phone). The Azure MFA with authentication phone makes it harder for a hacker to sign in with just a stolen password.
How to set up multi-factor authentication to secure your application and logins. I would recommend reading Microsoft documentation to setup Azure MFA.
Learn to change Azure MFA Authentication Phone Number from the end user’s Windows 10 device. Related Post – How to Reset the MFA Contact Details of Azure AD User from Azure Portal.
How to change the user’s Azure MFA authentication phone number?
There are two (2) options to change the user’s Azure MFA authentication phone number. They are:
1. Self-service: This option allows users to change their authentication phone number themselves. This post provides more details about the self-service (user-empowered) method.
2. Help Desk: The second option to change the MFA authentication phone number is via the helpdesk. IT helpdesk, which has access to the Azure AD console, can reset or change the MFA authentication phone details from the Azure portal.
I explained the helpdesk process in one of my previous posts.
How to Change Azure MFA Authentication Phone
The end-user can follow the steps mentioned below to reset or change the Azure MFA Authentication Phone.
Login to the MyApps portal (http://myapps.microsoft.com/) with Azure AD User name and password. You might have SSO (Single Sign-On) enabled in your organization. If so. The user will get automatically logged in MyApps portal.
- Click on the Profile picture in the right-hand top corner of the portal.
- The following link may get changed. So, if the link is not working, try to use the My Apps portal. (https://account.activedirectory.windowsazure.com/r#/profile).
- Click on Profile options from the menu option, as seen in the screenshot below. The following link may get changed. So, if the link is not working, try to use the My Apps portal. https://account.activedirectory.windowsazure.com/Proofup.aspx
- From the Additional security verification page, select what your preferred option is. You will use this verification option by default. Set up one or more of these authentication options:-
- Call my authentication phone
- Text code to my authentication phone
- Call my office phone
- Notify me through the app
- Use the verification code from the app or take
- You can change the Authentication phone number from the “How would you like to respond?” section.
- You can also use a backup or alternate authentication phone from the same page.
You can also use the Microsoft Azure Authenticator app from Google Play or Apple Store as an Azure MFA Authentication Phone. This Microsoft Authenticator App is my favourite Azure MFA Authentication Phone method.
The “How would you like to respond?” section on the page allows you to delete the Microsoft Authenticator app from your iPhone or Android phone.
- Click the Save button to complete the Azure MFA Authentication Phone number change.
Once you click on the Save button, you will receive a security code on your new Azure MFA Authentication phone. Enter that MFA code on the screen to complete the change.
- Your phone numbers will only be used for account security. Standard telephone and SMS charges will apply. Hence we completed the change to Azure MFA Authentication Phone.
- You can directly change the Azure MFA Authentication Phone number from https://aka.ms/MFASetup
Resources
- How to Reset the MFA Contact Details of Azure AD User
- How it works: Azure Multi-Factor Authentication
- Configure Azure Multi-Factor Authentication settings
- How to Setup Multi-Factor Authentication Phone?
We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.
Author
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…
Hello Anoop,
I want to integrate Azure MFA in my website, Is it possible to integrate in custom apps?
Currently OS of server is Linux (Ubuntu) from AWS EC2, my client wants to integrate Azure MFA on his website (built in PHP),
I checked its docs and tutorials but didn’t found any SDK or REST API,
I checked and integrate this Node JS code https://github.com/Azure-Samples/active-directory-node-webapp-openidconnect
It worked fine, but:
– It will need to add an user in Active Directory first (Can I authenticate users directly, without registering on Azure, also currently I have more than 3000 existing users and don’t want to give them access of Azure Portal),
– User completely redirected on Microsoft site during authentication process (Is there any way without redirecting),
Please help me regarding this,
Thanks & regards,
HarisH