[ms office - o365] Number Matching - MFA

[CrootUK]

Heads up number matching will be enabled by default on Office 365 Tenants from Feb 27 2023.

[Rob_D]

I'm probably being dense, but what is number matching?

[CrootUK]

https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match

[TechMonkey]

It's great. I've had it turned on for a while now and it really concentrates the mind.

[FN-GM]

I’m of the opinion that this still isn’t as good at the unique number generator that the user types into the screen. I am curious as to what other people think please?

[TechMonkey]

What are your reservations?

[FN-GM]

What are your reservations?

 

Attackers using social engineering to get around it. Convincing the user to type the numbers in and hit approve. It’s a shame the map feature of the number matching isn’t accurate. [emoji31]

 

I understand that this can be an issue for the code generator as well. But I personally think it still requires a little more thinking.

 

I’m just wondering what other people think really.