Authentication methods, strength and recovery

Skills you'll practise

• Rank common sign-in methods by phishing resistance and explain why.
• Identify accounts whose registered methods don't meet the required strength.
• Plan recovery so that a lost phone doesn't become a lockout or a security gap.
• Recover a user who has lost every method, following verification and a time-limited pass.

Course outline

1. 1.Authentication methods, strength and recoveryVideo · 4 min
2. 2.Comparing sign-in methodsLesson · 8 min
3. 3.Planning for lost devicesLesson · 8 min
4. 4.Recovering access safelyLesson · 8 min
5. 5.Authentication methods, strength and recovery: knowledge checkKnowledge check · 20 questions
6. 6.Authentication methods, strength and recovery: practical exerciseKnowledge check · 1 question
7. 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Microsoft Learn: Authentication methods in Microsoft Entra ID
• Microsoft Learn: Conditional Access authentication strengths
• Microsoft Learn: Configure Temporary Access Pass
• Microsoft Learn: Passkeys (FIDO2) in Microsoft Entra ID
• NIST SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management