Topic
SMS codes, push notifications, and passkeys all count as MFA, but they do not stop the same attacks. Here is the strength hierarchy, what defeats each tier, and the upgrade path to phishing-resistant.
Microsoft-managed Conditional Access policies land in tenants automatically, Entra ID preps device-bound passkeys, Ignite floods Teams with Copilot, and Intune unveils two paid add-on capabilities.
Five Azure AD MFA controls most tenants never touch: number matching, location context, authentication strengths, and two registration reports that catch attacker-added MFA methods.
June 2022 for MSPs: Temporary Access Pass reaches GA for passwordless onboarding, Microsoft walks back the July 11 legacy CSP renewal block, and Teams ships seven features.
October 2021 for MSPs: tenants get 30-day notices before basic auth and SMTP AUTH shut off, Message Trace leaves the SCC, DKIM setup gets simpler, and Authenticator adds number matching.
