Azure MFA

Multi-factor authentication for cloud and on-premises resources: Azure MFA strengthens sign-ins by requiring a second proof of identity beyond the password, protecting access to cloud applications, the Microsoft identity platform, and (through supporting components) on-premises systems against credential compromise.

Phone call verification: As a verification method, the service places an automated phone call to the user's registered number; the user presses a key or enters a PIN to approve the sign-in, providing an out-of-band second factor that requires possession of the phone.

SMS text message verification: The service can send a one-time code via SMS that the user enters to complete authentication, or use two-way SMS where the user replies to confirm, delivering a second factor to the user's mobile number.

Mobile app push notification approval (Microsoft Authenticator): The Authenticator app receives a push notification that the user approves or denies with a tap (optionally with number matching and biometric confirmation), offering a fast, phishing-resistant approval flow without typing codes.

Time-based one-time passcode (TOTP/OATH) support: The Authenticator app and compatible OATH software tokens generate rotating six-digit verification codes that the user enters, allowing MFA even when the device has no network or push connectivity.