Authentication Methods

Overview

Using the Cayosoft Administrator Service, the delegated administrator can see the users' existing registered authentication methods, add a user Phone number, Email, or Temporary Access Pass authentication methods, and remove added methods if needed.   

The user can also register at any time using MySecurityInfo.

To manage authentication methods these automation rules and web actions can be used:

1. Authentication Methods Web Action.
2. AD Users M365 Authentication Methods (MFA) Status rule.
3. Microsoft 365 Users Authentication Methods (MFA) Status rule.
4. Text File User Authentication Methods (MFA) Status rule.
5. Text File | Delete Authentication Methods (re-register MFA) rule.
6. Microsoft 365 Users | Delete Authentication Methods (re-register MFA) rule.

Authentication methods web action

Phone number

For Microsoft Entra multifactor authentication or SSPR, users can receive a text message with a verification code to enter the sign-in interface or receive a phone call: Phone authentication methods | Microsoft Learn.

To add a user Phone number authentication method in the Cayosoft Web Portal:

1. Select a user.
2. Click 'Authentication Methods'.
3. Select Mobile phone, Office phone, or Alternate mobile method type.
4. Specify a phone number.
5. Click 'OK'.
6. Click 'Update'.

Email

Email OTP (One Time Password) sends a code to a user's email account which is then used to authenticate. >Learn more for SSPR: One-time passcode authentication for B2B guest users | Microsoft Learn.
For members of a tenant, email OTP is usable only for Self-Service Password Recovery. It may also be configured to be used for sign-in by guest users.

To add a user Email authentication method in the Cayosoft Web Portal:

1. Select a user.
2. Click 'Authentication Methods'.
3. Select the 'Email' method type.
4. Specify user email.
5. Click 'OK'.
6. Click 'Update'.

Temporary Access Pass

A Temporary Access Pass is a time-limited passcode that can be configured for single use or multiple. Users can sign in with a Temporary Access Pass to onboard other authentication methods including passwordless methods such as Microsoft Authenticator, FIDO2, or Windows Hello for Business: Configure a Temporary Access Pass in Microsoft Entra ID to register passwordless authentication methods | Microsoft Learn.

To add a Temporary Access Path in the Cayosoft Web Portal:

1. Select a user.
2. Click 'Authentication Methods'.
3. Select the 'Temporary Access Pass' method type.
4. Specify Activation duration: enter value from 60 to 480 mins.
5. Specify if it will be a one-time use.
6. Specify if it will be delayed start time.
7. Click 'OK'.
8. Click 'Update'.