MicrosoftDocs
Multiple Choice in the Number Matching Prompt
When we were testing this, my colleague and I both got slightly different experiences.
My experience was as documented here, in that the notification had a text box and I had to type in the number.
But my colleague got a multiple choice style prompt. the same as this article I found online:
https://janbakker.tech/number-matching-with-microsoft-authenticator-app-in-azure-mfa/
I prefer the multiple-choice experience that my colleague got, but I cannot for the life of me figure out what he did differently, and the MS Docs don't seem to cover this at all.
Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.
- ID: ee6ac70d-5853-6a3a-0964-23b46910b4c4
- Version Independent ID: a5beda87-9845-8807-6221-7fdc64079587
- Content: Passwordless sign-in with Microsoft Authenticator - Azure Active Directory - Microsoft Entra
- Content Source: articles/active-directory/authentication/howto-authentication-passwordless-phone.md
- Service: active-directory
- Sub-service: authentication
- GitHub Login: @Justinha
- Microsoft Alias: justinha
@danielharkerdp Thanks for your feedback! We will investigate and update as appropriate.
@danielharkerdp Apologies for the delayed response. I have assigned the issue to author. @Justinha please review.
@danielharkerdp The 3 number buttons version, that the colleague saw, is called 'tap and select'.
This older system is vulnerable to people just mashing one of the 3 buttons (accidentally the right one) if an attacker sends lots of notifications ("I just want to stop the notifications 😨").
'Number matching' with the keyboard is the modern system, and will be enabled for all accounts on February 27, 2023. It also allows for longer numbers in the future. You need to have an updated Microsoft Authenticator app to get this new modern freely enter numbers prompt. Maybe the colleague had updates disabled for the app.
Administrators can set the authentication methods policy per Azure AD user, to switch to the old slightly more vulnerable 3 button 'tap and select' version.
I think this ticket can be closed.
