发出MFA请求以验证用户 [英] Issue an MFA request to validate user

问题描述

您好，

Azure MFA是否具有以编程方式将通知推送给用户的工具？ （在他们外面进行登录）

Does Azure MFA have the facility for a notification to be programmatically pushed to a user? (outside of them doing a sign-in)

例如，用户呼叫他们的服务台请求帮助，帮助台可以向用户发送通知用户确认。短信或"告诉我屏幕上的号码"不安全（除非它与
a常规身份验证请求有所区别），但如果推送通知可以使用特定措辞进行自定义，例如"帮助台请求您验证您的身份"，那么它将节省我们将另一个产品添加到我们的工具集中以承担验证用户身份的任务
。

So for example a user calls their helpdesk to request assistance, helpdesk could push a notification to the user for the user to acknowledge. SMS or "tell me the number on your screen" wouldn't be secure (unless it was somehow differentiated from a regular auth request), but if the push notification could be customized with specific wording eg "helpdesk is requesting that you validate your identity", then it would save us from adding yet another product to our toolset to take on the task of validating user identity.

这也可以在帮助台调用用户的情况下反向运行 - 帮助台可以推送验证消息，以确保用户是他们的实际服务台呼叫，而不是社交工程电话。

This could work in reverse too where helpdesk calls a user back - helpdesk could push a verification message to assure the user that it was their actual helpdesk calling rather than a social engineering call.

谢谢

詹姆斯

推荐答案

嗨詹姆斯，

现在这不支持短信但你可以为手机添加自定义手机短信致电MFA。  https://docs.microsoft.com/en -us /天青/有源目录/认证/ HOWTO-MFA-mfasettings

Right now this is not supported for SMS but you can add a custom phone message for phone call MFA. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

您也可以将MFA添加到您的应用中，但这又不是您想要的。  https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-sdk <无线电通信/>

You can add MFA to your apps as well, but again that is not quite what you are looking for. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-sdk

我建议将此功能请求作为产品反馈留在
用户语音。我还会根据您的建议与产品团队的联系人联系，如果他们有见解，请更新此主题。 

I would recommend leaving this feature request as product feedback in User Voice. I will also reach out to my contacts on the product team with your suggestion and update this thread if they have insights. 

这篇关于发出MFA请求以验证用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！