- A password
- A trusted device, say a phone.
Multi-Factor Authentication in Windows Azure is an application service requiring users to verify themselves using a text message, mobile app, or automated phone call in addition to providing a password to the user.
So, here, I’m using previous Windows Azure Active Directory. We can see the nitinazuread directory in the Active Directory, which we created in the first article of this series. Go ahead and click on the
NEW button at the bottom of the page.
Here, we need to create multi-factor authentication provider. So, follow the screenshot.
Click on
Quick Create to create an Authentication provider.
Give a name to it. You can give your directory name here as well. In the Model section, choose Per Enabled User if there is any user.
In the next step, it will ask for the directory where you want your authentication provider. It’s pretty simple. Select the appropriate directory.
All is set, now. Simply click on
Create check mark.
So, your authentication provider has been successfully created.
Now, I’m going to set up multi-factor authentication to the Nitin Pandit user in my directory. Select user and click on
Manage Multi-Factor Auth at the bottom of the window.
After clicking on it, you will be redirected to a new portal of Multi-Factor Authentication. Select
Sign in for the allowed users from the dropdown list.
You can see a list of users, all having disabled status of authentication. I want to assign authentication to Nitin Pandit user. So, mark on it by clicking and click on
Enable option at the right side of the portal.
A popup will be generated. Click on
enable multi-factor auth.
Now, the authentication is successfully enabled to the selected user.
Next, login with Nitin Pandit user name and password. There are a few things for you to keep in mind. Here, I'm using a new browser for this login and logging in with Nitin Pandit user name that we’ve created in previous articles (part 1).
After clicking on Sign in button, you will be redirected to a new page. This page is for security purposes where you need to verify the account. Go ahead and click on
Set it up now.
Here is the verification page for the user. Either provide a phone number or select another verification type, as shown in the following screenshot.
Choose your region, provide your appropriate phone number, and select the method whether you want a call or a text. Click on
Contact me to proceed further.
It will send a text message on the number that you’ve provided.
Enter the code and click on
Verify button to verify it.
This is how the verification is done. Now, logout from the current portal.
Again, log in with the same user name and password. You need to attempt the last verification again, here. It will again send a text message on the same number. Enter the received code and click on
Sign in button.
You have successfully logged in with your username into Windows Azure.