\nFirst they can login to their Azure Active Directory Profile, which is available as Users from your On-Premise Active Directory, but also for Users which resides only in the cloud. The URL of the Profile is the following:
\nhttps:\/\/account.activedirectory.windowsazure.com\/profile\/default.aspx
\nThe following Webpage appears:
\n
![\"Azure](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa01.png\")
<\/a>\nIn a DirSync Scenario you can have configured the Password Write-Back to your Active Directory if the Passwort Reset Functionality is needed. But for the purpose of this topic, we need to click on “Additional security verification”. You will find the following options to use a additional verification:
\n
![\"MFA](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa02.png\")
<\/a>\nWe will choose the option to “Notify me through app”, which is the most laziest, in my point of view. When you have selected this option, you have to activate the check Box beyond “Mobile App” and click on configure:
\n
![\"Configure\"](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa03.png\")
<\/a>\nYou will then get the information, what to do, to use the app as an authentication method:
\n
![\"Configure](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa04.png\")
<\/a>\nYou will also find the three Application Links which you can add to a SCCM Application, this application you can then deploy to your mobile Device Users:
\n
![\"SCCM](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa05.png\")
<\/a>\nWhen you have installed the app on your favorite device, you can then add your account. When this is done, you can click “Save” on the Webpage, and your configured App will be checked for a verification, if you have allowed the Push Notification for the MFA, you get notified and can answer:
\n
![\"AzureMFA06\"](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa06.png\")
<\/a> ![\"AzureMFA07\"](\"http:\/\/hosebei.wordpress.com\/wp-content\/uploads\/2015\/02\/azuremfa07.png\")
<\/a>\nThat’s it, lazy MFA is coming \ud83d\ude09
\nMartin<\/p>\n","protected":false},"excerpt":{"rendered":"
Hi there, today I would like to show, how End-Users can configure their Multi Factor Authentication for Windows Azure Logons. This might be important for them, because they could have different choices on how they would get contacted. First they can login to their Azure Active Directory Profile, which is available as Users from your […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24],"tags":[],"class_list":["post-1707","post","type-post","status-publish","format-standard","hentry","category-mdm"],"_links":{"self":[{"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=\/wp\/v2\/posts\/1707","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1707"}],"version-history":[{"count":0,"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=\/wp\/v2\/posts\/1707\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1707"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1707"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.hosebei.ch\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1707"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}