Sending an Entra MFA Push through ServiceNow

[HMcNulty]

Hello Experts! Not sure I'm posting this on the correct forum, but here goes.

Who has some experience with integrating ServiceNow with Entra? We use Entra as our SSO provider, and have been given a requirement to allow the help desk to send a user an MFA push notification on their Microsoft Authenticator through ServiceNow to verify their identity on calls rather than just asking for their information. Has anyone had a requirement like this before or has some insight on the topic? I am having quite a bit of trouble finding information about this online without using a third party application between the two such as Traceless or CallerVerify. Let me know if I can provide any additional info, thanks so much!

[Peter Delf]

I too have received the same requirement today.  We were going to use DUO, which has an API, but I can't find an equivalent for Microsoft Authenticator.

[Ammm]

That is currently not possible. Microsoft wants to make sure that any push is only coming from them. There are pleanty of other solutions and options though. E.g.:  https://www.youtube.com/watch?v=HlMlJk6R3ao

[liamllewellyn]

We use Traceless for this and it’s worked great. I manage a number of client accounts and credentials, mostly through Teams but we started using ServiceNow as well, and being able to verify someone through ServiceNow before making password or account changes has been pretty helpful.

[Cheryl ODell]

We are in the process of implementing Clear IDRamp integration.  If people want to be able to call the ServiceDesk to reset their password, to identity proof them, the user will have to register with Clear ID (which is the same program used by TSA/airports).  It's getting complicated, but we will see how it goes.

Cheryl O'Dell