Setup of Microsoft Authenticator Backend

This will assist you if a user is having trouble setting up Microsoft Authenticator.

 

1. In Entra, head to "Users", select the user and select "Authentication Methods".

   
   
   
   

2. Delete any authentication methods (NOT DUO, THIS WILL STILL BE USED FOR VPN) so we can start fresh.

   
   
   

3. In Active Directory, on the user's profile, remove group SG_DUO_M365MFA and add group SG_M365_MSMFA on the user's profile.SG_M365_MSMFA.
   
   
4. Perform an Azure sync on PBR-DC-B1. Here is how: Azure AD Connect Sync ... | BookStack
   
   
5. Now follow article: Microsoft Authenticato... | BookStack
   
   
6. Once complete, the Entra profile of the user will look like below:
   Note: Sometimes users have Microsoft Authenticator (outlook) as the authentication method, this is wrong and was setup by the user previous to the official Microsoft Authenticator changeover.