ACTION REQUIRED: Azure MFA Number Matching Enabled by Default on 8 May 2023

Dear Customer,

Number matching is a key security upgrade to traditional second factor notifications in Microsoft Authenticator. Microsoft will remove the admin controls and enforce the number match experience tenant-wide for all users starting May 8, 2023. The changes will only affect Microsoft Authenticator Application users. Users that are currently using other authentication methods such as Phone (SMS/Text) for example will not be affected.

Microsoft managed settings 

In addition to configuring Authentication methods policy settings to be either Enabled or Disabled, IT admins can configure some settings in the Authentication methods policy to be Microsoft managed. A setting that is configured as Microsoft managed allows Azure AD to enable or disable the setting.

After 8 May 2023, you will no longer be able to make changes to these settings. The Status setting will be set to Enabled. The Target section will be set to include All users. As stated, these settings cannot be changed after this date. You will not be able to add any exclusions to the Target setting either.

In the Azure Portal, open Azure Active Directory. Select Security on the left-hand menu. On the next windows select Authentication methods and then Policies. Microsoft Authenticator policies can be configured here ( see picture below)

Use number matching in multifactor authentication (MFA) notifications - Microsoft Entra | Microsoft Learn

Protecting authentication methods in Azure Active Directory - Microsoft Entra | Microsoft Learn

If you need support, please do not hesitate to contact us

Best Regards