Azure服务原则是否支持MFA [英] Does Azure Service principle support MFA

问题描述

我对服务原则有疑问.我们可以为服务原理启用多因素身份验证吗?谁能证实我这一点.

I have question related to Service Principle. Can we enabled multi - factor authentication for Service Principle. Can any one confirm me on this.

我的第二个问题是.MSI与AAD中的服务主体有何不同?"

Also my second question is". How do MSIs differ from Service Principals in AAD?"

谢谢

推荐答案

我们可以为服务原则启用多因素身份验证吗?谁能证实我的意思.

Can we enabled multi - factor authentication for Service Principle. Can any one confirm me on this.

在AAD中，MFA用于用户主体，而不是服务主体.我相信您可能是说，如果我们可以为AAD中的client_credentials流启用MFA.当前不可能.

In AAD, MFA is for user principals(users), NOT service principals. I believe that you may mean if we can enable MFA for client_credentials flow in AAD. It's not possible currently.

我的第二个问题是.MSI与Service有何不同?AAD的校长?"

Also my second question is". How do MSIs differ from Service Principals in AAD?"

MSI实际上在AAD中使用服务主体.Azure注册了一个服务主体来代表Azure资源(它是系统托管的服务).但是，此服务主体是系统管理的.因此，您可以使用它，但不能对其进行配置.

MSI actually uses service principal in AAD. Azure registered a service principal to represent the Azure resource(it's a system managed service). However, this service principal is system managed. Therefore, you can use it but cannot configure it.

这篇关于Azure服务原则是否支持MFA的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！