For more information about previews, see Supplemental Terms of Use for Microsoft Azure Previews.

OATH hardware tokens are supported as part of a public preview. Programmable OATH TOTP hardware tokens that can be reseeded can also be set up with Azure AD in the software token setup flow. The secret key can only contain the characters a-z or A-Z and digits 2-7, and must be encoded in Base32. Secret keys are limited to 128 characters, which may not be compatible with all tokens. These keys must be input into Azure AD as described in the following steps. OATH TOTP hardware tokens typically come with a secret key, or seed, pre-programmed in the token. The preview is only supported in Azure Global and Azure Government clouds. Hardware OATH tokens are available for users with an Azure AD Premium P1 or P2 license. Customers can purchase these tokens from the vendor of their choice.

OATH hardware tokens (Preview)Īzure AD supports the use of OATH-TOTP SHA-1 tokens that refresh codes every 30 or 60 seconds. Customers can purchase these tokens from the vendor of their choice and use the secret key or seed in their vendor's setup process. These programmable hardware tokens can be set up using the secret key or seed obtained from the software token setup flow. Some OATH TOTP hardware tokens are programmable, meaning they don't come with a secret key or seed pre-programmed. Third-party applications that use OATH TOTP to generate codes can also be used. The Authenticator app automatically generates codes when set up to do push notifications so a user has a backup even if their device doesn't have connectivity. Azure AD generates the secret key, or seed, that's input into the app and used to generate each OTP. Software OATH tokens are typically applications such as the Microsoft Authenticator app and other authenticator apps. Azure AD doesn't support OATH HOTP, a different code generation standard. OATH TOTP can be implemented using either software or hardware to generate the codes. OATH TOTP (Time-based One Time Password) is an open standard that specifies how one-time password (OTP) codes are generated.

Ms mfa setup