This is called two-step verification or multi-factor authentication. As the only way to sign in - just tap an approval on your phone to sign in. This is called going passwordless. Just follow the three steps to start using Authenticator to sign in. Get the app. Add your account. Learn how to sign in.
Microsoft Authenticator helps you sign in to your accounts if you've forgotten your password, use two-step verification or multi-factor authentication, or have gone passwordless on your account.
While in Audit mode, Event ID: 45 will be logged on the domain controller when it receives a Kerberos authentication request with an unsafe certificate. The authentication request will be allowed and no client errors are expected.
If your organization supports two-factor verification or multi-factor authentication sign-in, you can set up your work or school accounts to use Authenticator as one of the verification methods.
Windows updates released on and after August 29, 2025 include added security protections that enforce checks on SIDs, causing authentication to fail when devices have duplicate SIDs.
Conveniently and securely sign in to all your online accounts using multifactor authentication, passwordless sign-in or password autofill with Microsoft Authenticator.
