Saturday, 7 March 2026

This tutorial shows you how to add multi-factor authentication (MFA) with SMS one-time passcode (OTP) to your iOS/macOS app using native authentication. MFA adds an extra layer of security by requiring a second verification step during sign-in.

This tutorial demonstrates how to implement Email strong authentication method registration into your Android app using native authentication. At least one strong authentication is mandatory for multifactor authentication (MFA) enabled users. Currently, we only support Email and SMS one-time passcode as strong authentication method.

1. Enroll in a Private Preview of SMS and Email OTP MFA on Native Authentication – [Fill out form](https://forms.office.com/r/P3m1q2j3hg)

Learn how to add multi-factor authentication (MFA) with email and SMS one-time passcodes to an Android app using Microsoft Entra native authentication.

Learn how to add email one-time passcode (OTP) multi-factor authentication (MFA) to an iOS or macOS app by using native authentication and enforce MFA with authentication context.

Learn how to register an email one-time passcode as a strong authentication method for MFA-enabled users in an Android app using Microsoft Entra native authentication.

Learn how to register an email strong authentication method for MFA-enabled users in an iOS or macOS app by using native authentication.

Learn how to register phone SMS as a strong authentication method for MFA-enabled users in an iOS or macOS app using native authentication, including configuring client capabilities and handling registration challenges.

Learn how to add multi-factor authentication (MFA) with SMS one-time passcodes to an Android app using Microsoft Entra native authentication.

Learn how to register an SMS one-time passcode as a strong authentication method for MFA-enabled users in an Android app using Microsoft Entra native authentication.

To support multi-factor authentication (MFA), update the Android client configuration to include the required MFA capabilities.

To support multi-factor authentication (MFA), update the Android client configuration to include the required MFA capabilities.

To support strong authentication method, update the Android client configuration to include the required registration capabilities.

Set the registrationRequired capability during client initialization to support strong authentication method registration.

Learn how to add multifactor authentication (MFA) with SMS one-time passcodes to an Android app using Microsoft Entra native authentication.

Learn how to add multifactor authentication (MFA) with email and SMS one-time passcodes to an Android app using Microsoft Entra native authentication.

Learn how to add email one-time passcode (OTP) multifactor authentication (MFA) to an iOS or macOS app by using native authentication and enforce MFA with authentication context.

1. Complete the steps in [Tutorial: Add sign-in in Android app by using native authentication](tutorial-native-authentication-android-sign-in-sign-out.md).

| `continuation_token` | [Continuation token](#continuation-token) that Microsoft Entra returns. |

Change default subdomain authentication settings inherited from root domain settings in Microsoft Entra ID.

- Your native application integrates with a third‑party fraud protection provider to securely evaluate risk signals before issuing an SMS one‑time passcode (OTP).

:::image type="content" source="media/overview/conditional-access-overview.png" alt-text="Screenshot of the Conditional Access overview page." lightbox="media/overview/conditional-access-overview.png":::

A Microsoft Entra documentation page was updated: Licensing Groups Resolve Problems.

Management concepts and how-tos for managing a domain name in Microsoft Entra ID

Learn about Microsoft Entra bulk operations related to users, groups,

Use Microsoft Entra groups to simplify role assignment management in Microsoft Entra ID.

Privileged roles and permissions in Microsoft Entra ID.

More scenarios limitations, and known issues for Microsoft Entra group-based licensing

How to take over a Domain name DNS domain name in an unmanaged Microsoft Entra organization (shadow tenant).

A Microsoft Entra documentation page was updated: Understand how multiple Microsoft Entra tenant organizations interact.

Use restricted management administrative units for more sensitive resources in Microsoft Entra ID.

> [!NOTE]

When you create a dynamic membership rule, the security of that group's membership depends on who can modify the attributes referenced in the rule. Before selecting an attribute, review the write permissions for that attribute—both in Microsoft Entra ID and in any connected source directories.

Learn how to add multi-factor authentication (MFA) with SMS one-time passcode (OTP) to an iOS or macOS app using native authentication, including enforcing MFA with authentication context and handling MFA errors.

The AI Administrator role is updated to support Agent 365, enabling delegated agent management without Global Admin involvement for routine tasks. Rollout starts March 2026. AI Admins gain expanded permissions for agent lifecycle management, tenant-wide consent (excluding Microsoft Graph app permissions), and risk monitoring via Identity Protection, enhancing security and compliance.

Discovery and insights (formerly Security Wizard) help you convert permanent Microsoft Entra role assignments to just-in-time assignments with Privileged Identity Management.

Learn how to configure security alerts for Azure resource roles in Privileged

Configure security alerts for Microsoft Entra roles Privileged Identity Management.

The following documentation provides guidance for Privileged Identity Management (PIM) PowerShell migration.

Learn how to approve or deny requests for Microsoft Entra roles in Privileged Identity Management (PIM).

Learn how to approve or deny requests for Azure resource roles in Privileged

Learn how to assign Azure resource roles in Privileged Identity Management (PIM).

Learn how to bring groups into Privileged Identity Management.

Learn how to complete an access review of Azure resource and Microsoft Entra roles Privileged Identity Management.

Learn how to configure Azure resource role settings in Privileged Identity Management (PIM).

Learn how to configure PIM for Groups settings.

Learn how to create an access review of Azure resource and Microsoft Entra roles in Privileged Identity Management (PIM).

Learn how to discover Azure resources to manage in Privileged Identity Management (PIM).

Learn how to extend or renew PIM for groups assignments.

Learn how to review access of Azure resource and Microsoft Entra roles

Learn how to extend or renew Azure resource role assignments in Privileged Identity Management (PIM).

Learn how to extend or renew Microsoft Entra role assignments in Microsoft Entra Privileged Identity Management (PIM)

Learn how to enable and get started using Privileged Identity Management (PIM) in the Microsoft Entra admin center.

Learn how to use Azure custom roles in Microsoft Entra Privileged Identity Management (PIM).

Learn how to view the audit log history for Microsoft Entra roles in

View activity and audit history for Azure resource roles in Privileged Identity Management (PIM).

Learn how to activate your group membership or ownership in Privileged

Describes the roles you can't manage in Microsoft Entra Privileged Identity

How to manage Microsoft Entra Privileged Identity Management (PIM) for Groups.

Describes how to use a resource dashboard to perform an access review

Provides an overview of Microsoft Entra Privileged Identity Management (PIM).

Information for understanding the APIs in Microsoft Entra Privileged

A design pattern describing how to onboard new employees remotely

A design pattern describing how to verify in helpdesk scenarios

```powershell

author: HULKsmashGithub

Use these PowerShell samples for Global Secure Access.