Now Mobile Setup with Microsoft Authenticator

[dc20]

Anyone have detailed steps for configuring the out of box Now Mobile app for authentication with Microsoft Authenticator?

We currently use SAML SSO for platform access and already use Microsoft Authenticator for M365 apps.

We only want users to have to use Microsoft Authenticator when attempting to access the instance through their mobile device.

[Jeff Boltz1 · Accepted solution]

Hi dc20,

If I am understanding correctly, you have a requirement to use Microsoft Authenticator OTP as an additional factor of authentication?

There are some pre-conditions; I found the learning portal on Adaptive Authentication helpful.

1.  Create/Set property glide.authenticate.mfa.with.multisso.enabled = true

2.  Configure Step-Up MFA Policy to meet your authentication requirements with the appropriate Policy Inputs

Upon SSO login, you should see a registration page with a QR code that you can grab with the MS Authenticator app.  Then enter the provided code.

[Randheer Singh]

Hi @Jeff Boltz1  @dc20 ,

Just to be clear, in this case, MFA is enforced on the ServiceNow side. It will work with any authenticator app supporting TOTP. Here is the product doc link.

if you want to allow it only with the MS authenticator app, please work with the Identity provider admin to enforce a policy on their side.

Thanks,

Randheer