启用OTP /验证码以在注册后使用 [英] Enable OTP / Verification Code for use after enrollment

问题描述

问候全部，

   我们正在试用Azure MFA Cloud，并在开始时决定最初将验证选项限制为仅在注册期间使用电话和移动应用程序，以限制新用户的混淆。请稍等，我们现在需要在某些情况下使用验证码
选项。如果我们在Azure门户中启用选项"来自移动应用程序或硬件令牌的验证码"，则不会更新已注册的选项。如果用户将
转到portal.office.com并在MFA身份验证期间选择"以其他方式登录"，则验证码选项不可用。如果我们强制用户重新注册，则验证选项可用。 

   We are piloting Azure MFA Cloud and decided in the beginning to limit the verification options initially to only Phone Call and Mobile App during enrollment to limit confusion for new users. Skip ahead, and we need to use the verification code option now in some instances. If we enable the option "Verification code from mobile app or hardware token" in the Azure portal, it doesnt seam to update those already enrolled. If a user goes to the portal.office.com and selects during MFA authentication "Sign in another way", the verification code option is not available. If we force the user to re-enroll, the verification option becomes available. 

 有没有办法通过后端的PowerShell启用此选项，以防止所有用户重新注册？

  Is there a way to enable this option via powershell in the back-end in order to prevent all the users to re-enroll?

推荐答案

您好，

是的，您可以通过PS执行此操作。这有点复杂，我建议您在执行此操作之前为少数用户进行测试。 

Yes, You can do this through PS. It is a little complicated and I would recommend testing this for few users before you do this. 

您已经启用了电话和推送通知，并且大多数用户已注册这些用户方法。

You already have phone call and Push notification enabled and most of the users have enrolled for these methods.

您可以使用以下命令进行检查

You can check this by using the following commands

user = Get-MsolUser -UserPrincipalName [e-mail]

user = Get-MsolUser -UserPrincipalName [e-mail]

user.StrongAuthenticationMethods

user.StrongAuthenticationMethods

因为我们不会改变这些方法，您需要为此创建两个对象。 （在此我假设推送通知是默认方法）

As we are not going to change these methods, you need to create to two objects for this. (In this I am assuming push notification is the default method)

这篇关于启用OTP /验证码以在注册后使用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！