Memorized secret and single-factor crypto hardware Password and Hybrid Azure AD joined with hardware TPM Password and Azure AD joined with hardware TPM

Memorized secret and single-factor crypto software Password and Microsoft Authenticator app (Notification) Password and Hybrid Azure AD Joined with software TPM Password and Azure AD joined with software TPM Password and Microsoft Authenticator app one-time password (OTP) Smartcard (Active Directory Federation Services) Windows Hello for Business with hardware TPM Microsoft Authenticator app for Android (passwordless) Windows Hello for Business with software Trusted Platform Module (TPM) Microsoft Authenticator app for iOS (passwordless) The following table has authenticator types permitted for AAL2: Azure AD authentication method

NIST AALs: AAL components and Azure Active Directory (Azure AD) authentication methods.

NIST authenticator types: Authenticator types.

Authentication basics: Terminology and authentication types.

Organizations working with federal agencies must meet these requirements.īefore starting authenticator assurance level 2 (AAL2), you can see the following resources: The National Institute of Standards and Technology (NIST) develops technical requirements for US federal agencies implementing identity solutions.

Ms authenticator app for windows