{"id":1933,"date":"2026-05-15T03:29:21","date_gmt":"2026-05-15T03:29:21","guid":{"rendered":"https:\/\/www.ultrexstaff.com\/?p=1933"},"modified":"2026-05-15T03:29:59","modified_gmt":"2026-05-15T03:29:59","slug":"setup-guide-enabling-google-authenticator-for-an-ms365-org-through-entra","status":"publish","type":"post","link":"https:\/\/www.ultrexstaff.com\/?p=1933","title":{"rendered":"Setup Guide: Enabling Google Authenticator for an MS365 Org through Entra"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Refer to this scribe guide if easier to interact with:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/scribehow.com\/page\/Setup_Guide_Enabling_Google_Authenticator_for_an_MS365_Org_through_Entra__4Bga1zmmQDu7NrgOK858nA\">https:\/\/scribehow.com\/page\/Setup_Guide_Enabling_Google_Authenticator_for_an_MS365_Org_through_Entra__4Bga1zmmQDu7NrgOK858nA<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring Third-Party OATH TOTP Applications for Multi-Factor Authentication<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This guide provides instructions for enabling and configuring third-party authenticator apps (such as Google Authenticator or Authy) as a secondary sign-in method for Microsoft 365 accounts through Entra. This is an alternative for users who prefer not to use the Microsoft Authenticator app.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Target Audience:<\/strong> This document includes both administrative configuration steps (for IT staff) and end-user setup instructions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before users can add a third-party app, the Microsoft Entra ID tenant must be configured to allow &#8220;Software OATH tokens.&#8221;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Enable OATH Tokens<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Log in to the Microsoft Entra admin center.<\/li>\n\n\n\n<li>Navigate to Protection > Authentication methods > Policies.<img decoding=\"async\" src=\"https:\/\/colony-recorder.s3.amazonaws.com\/files\/2026-05-15\/186f477e-4dd4-43e6-addd-8a6968177d7c\/media_item.webp?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIA2JDELI43356LVVTC%2F20260515%2Fus-west-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20260515T032625Z&amp;X-Amz-Expires=900&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=66cec2e585e9118c076538f1ea881e69544a91003877cf60da121fdf9f7e324a\"><\/li>\n\n\n\n<li>Select Software OATH tokens.<\/li>\n\n\n\n<li>Set the Enable toggle to <strong>On<\/strong>.<\/li>\n\n\n\n<li>In the Target tab, select the appropriate groups or <strong>All users<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">2. Resolving &#8220;Missing Link&#8221; Issues<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If users report they cannot see the option for &#8220;Different authenticator app,&#8221; check the following settings:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Registration Campaign:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Navigate to <mark>Authentication methods > Registration campaign<\/mark>. <img decoding=\"async\" src=\"https:\/\/colony-recorder.s3.amazonaws.com\/files\/2026-05-15\/4fc65e72-3dd7-45de-9954-4d6121e887d9\/media_item.webp?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIA2JDELI43356LVVTC%2F20260515%2Fus-west-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20260515T032625Z&amp;X-Amz-Expires=900&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=f427a02fe1bdf5546b0a86bc129ff6d8f9c4b9b602eb4a82f0235cf647da96df\"><\/li>\n\n\n\n<li>If state is set to Microsoft Managed, Microsoft may hide other options to force the use of the Microsoft app. Consider just setting to &#8220;Enabled&#8221; or adding an exclusion for specific users during setup.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>System-preferred MFA:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Navigate to <mark>Authentication methods > Settings<\/mark>. <img decoding=\"async\" src=\"https:\/\/colony-recorder.s3.amazonaws.com\/files\/2026-05-15\/97ab4322-516d-4898-a7ee-51e61f26a650\/media_item.webp?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIA2JDELI43356LVVTC%2F20260515%2Fus-west-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20260515T032625Z&amp;X-Amz-Expires=900&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=08a750ef5c0fa50809cd17c40f18f3eaa74c1fba7f81797b46f355cf008f9d9c\"><\/li>\n\n\n\n<li>If enabled, Entra ID will automatically skip selection screens to prompt for the most secure method found. This is preferred to leave enabled to make sure strongest MFA method is selected, but if it causes issues, switch to &#8220;Disabled&#8221;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>This guide provides instructions for enabling and configuring third-party authenticator apps (such as Google Authenticator or Authy) as a secondary sign-in method for Microsoft 365 accounts through Entra.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[116,98,117],"tags":[],"class_list":["post-1933","post","type-post","status-publish","format-standard","hentry","category-intune-and-entra","category-it-knowledge-base-articles","category-ms365","post-preview"],"_links":{"self":[{"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=\/wp\/v2\/posts\/1933","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1933"}],"version-history":[{"count":3,"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=\/wp\/v2\/posts\/1933\/revisions"}],"predecessor-version":[{"id":1936,"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=\/wp\/v2\/posts\/1933\/revisions\/1936"}],"wp:attachment":[{"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1933"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1933"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ultrexstaff.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1933"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}