Step-up Authentication with External OTP - Microsoft Authenticator

[nvachhani]

We’re looking to implement password self-service. Questions that came up from the customer were:

• What MFA providers are supported? Customer uses Microsoft Authenticator
• Are there partner/customer facing documentation specific around MFA configuration using REST or other method?

We have looked at Configuring Step-up Authentication and Verification but do not see any docs on MFA configuration.

Thanks

[rushikeshvartak]

You can configure MFA which provides REST APIs 

[nvachhani]

What are the steps to this? Is there documentation on this?

How does the Rest connection speak to the Change Password component in Saviynt? Does this require a Security System/Endpoint?

[rushikeshvartak]

https://docs.saviyntcloud.com/bundle/EIC-Admin-v2020x/page/Content/Chapter14-Password-Management/Con...

[nvachhani]

Is there any other documentation on configuring external MFA for password self-service in Saviynt or is the Step Up Configuration documentation all that is available for configuring external MFA?

The client is wishing to use Microsoft Authenticator with number matching without using an email or SMS OTP, is this possible? 

[saikanumuri]

Hi Neehar,

As the integration is performed using the REST connector, Any MFA provider where REST APIs are exposed can be configured with Saviynt. The document MFA Setup which you were already referring to has the detailed steps outlined to perform the integration along with the Sample JSON. Please let us know if you feel any information is missing and we will do our best to address your concerns.

We only support Email and SMS at this point. Please create an enhancement request in the Ideas portal for Number Matching.
https://ideas.saviynt.com/

[nvachhani]

Hi, thanks for your detailed response.

So we will need to do some trial and error to see if MS Authenticator API can leverage the JSON provided in the Step-Up Auth document? Are there any other customers using MS Authenticator as an external MFA/step-up authentication method?

Thanks,

Neehar