Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)?

Azure Multi-Factor Authentication (MFA) strengthens the security of user sign-ins by requiring multiple forms of verification. It is important to recognize which methods are officially supported for this purpose.

One of the methods supported by Azure MFA is the use of text messages (SMS). Users can receive a one-time code via SMS that they must enter in addition to their username and password. This adds a layer of security because it requires access to a phone in addition to knowing the account credentials.

The Microsoft Authenticator app is also a valid method for Azure MFA. This app provides an additional verification factor through push notifications or time-based one-time passwords (TOTPs).

Phone calls are another supported method. Users can receive a phone call that provides a verification code or prompts them to confirm their identity by pressing a certain key.

Email verification, however, is not a supported method for Azure MFA. This is because email can be less secure compared to phone-based methods, given the potential for email accounts to be compromised. Therefore, while text messaging, the Authenticator app, and phone calls are all integral components of the Azure MFA process, email does not meet the criteria for multi-factor authentication in this context.