Microsoft Entra ID
AuthenticationSystem Preferred Authentication
In brief
The table now lists External multifactor authentication as method 3, Certificate-based authentication as method 4, and Microsoft Authenticator notifications as method 5. The External MFA entry also has updated dash formatting.
What Entra admins need to know
Administrators referencing this page should use the revised method order. No configuration change is required.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
|------|-----------|----------|----------------------|
| 1 | Temporary Access Pass (TAP) | Recovery | 1FA + MFA |
| 2 | Passkey1 | Phishing-resistant | 1FA + MFA |
| 3 | External multifactor authentication (MFA) | – | MFA |
| 4 | Certificate-based authentication (CBA) | Phishing-resistant | 1FA or 1FA + MFA |
| 45 | Microsoft Authenticator notifications | Passwordless | 1FA + MFA |
| 5 | External multifactor authentication (MFA) | — | MFA |
| 6 | Time-based one-time password (TOTP)2 | — | MFA |
| 7 | Telephony3 | — | MFA |
| 8 | QR code | Frontline worker | 1FA |
@@ -225,9 +225,9 @@ When in the **Microsoft managed** state, the system evaluates available credenti |------|-----------|----------|----------------------| | 1 | [Temporary Access Pass (TAP)](howto-authentication-temporary-access-pass.md) | Recovery | 1FA + MFA | | 2 | [Passkey](concept-authentication-passkeys-fido2.md)<sup>1</sup> | Phishing-resistant | 1FA + MFA |-| 3 | [Certificate-based authentication (CBA)](concept-certificate-based-authentication.md) | Phishing-resistant | 1FA or 1FA + MFA |-| 4 | [Microsoft Authenticator notifications](concept-authentication-authenticator-app.md) | Passwordless | 1FA + MFA |-| 5 | [External multifactor authentication (MFA)](how-to-authentication-external-method-manage.md) | — | MFA |+| 3 | [External multifactor authentication (MFA)](how-to-authentication-external-method-manage.md) | – | MFA |+| 4 | [Certificate-based authentication (CBA)](concept-certificate-based-authentication.md) | Phishing-resistant | 1FA or 1FA + MFA |+| 5 | [Microsoft Authenticator notifications](concept-authentication-authenticator-app.md) | Passwordless | 1FA + MFA | | 6 | [Time-based one-time password (TOTP)](concept-authentication-oath-tokens.md)<sup>2</sup> | — | MFA | | 7 | [Telephony](concept-authentication-phone-options.md)<sup>3</sup> | — | MFA | | 8 | QR code | Frontline worker | 1FA |