How deeply does Microsoft Azure in Action cover authentication factor?

Defines three factor categories and sketches Conditional Access configuration, but stops short of detailed policy design.

Authentication factor

As explained in Microsoft Azure in Action

An authentication factor is an independent category of evidence used to verify an identity, such as knowledge, possession, or a biometric characteristic.

An authentication factor is a category of evidence used to verify identity. Multifactor authentication (MFA) strengthens access by requiring at least two different factor types instead of trusting a username and password alone. section 6.5

The three factor categories are:

Something you know, such as a username and password. section 6.5
Something you have, such as a phone with an authenticator app or a hardware security key. section 6.5
Something you are, such as a fingerprint or face scan. section 6.5

Requiring multiple factors limits the damage from reused, exposed, or weak passwords. In Azure, administrators configure the requirement through Entra ID Security and Conditional Access policies. section 6.5

How Microsoft Azure in Action covers it

liveBook manning.com

Read Microsoft Azure in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Authorization in ActionAn authentication factor is a category of evidence used to verify an entity's identity during authentication.

Compare how 2 books explain authentication factor →

Related concepts

multifactor authenticationused by · Multifactor authentication is an authentication method that verifies identity using evidence from at least two distinct authentication-factor categories.
possession factorincludes · A possession factor is an authentication factor based on the claimant’s control of a required physical item or device.
inherence factorincludes · An inherence factor is an authentication factor based on a distinctive biological or behavioral characteristic of the claimant.
knowledge factorincludes · A knowledge factor is an authentication factor based on information known by the claimant, such as a password, PIN, or secret.

This explainer was generated by Manning's knowledge graph from the text of Microsoft Azure in Action. The section links point to the parts of the book it draws on.