Skip to content

Commit 0ffbeef

Browse files
committed
fix PR bugs found
1 parent 1ff1f63 commit 0ffbeef

11 files changed

Lines changed: 20 additions & 20 deletions

learn-pr/wwl-sci/manage-implement-authentication-methods/1-introduction.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Introduction
66
description: Introduction to implementing and managing authentication methods in Microsoft Entra ID for Contoso's hybrid environment.
77
ms.date: 03/05/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-assisted

learn-pr/wwl-sci/manage-implement-authentication-methods/2-explore-authentication-methods.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Explore Microsoft Entra ID Authentication Methods
66
description: Explore the spectrum of Microsoft Entra ID authentication methods, from password-based to passwordless, and understand authentication strength and security hierarchy.
77
ms.date: 03/04/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-assisted

learn-pr/wwl-sci/manage-implement-authentication-methods/3-configure-mfa.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Configure Multi-Factor Authentication in Microsoft Entra ID
66
description: Learn how to deploy and configure multi-factor authentication (MFA) in Microsoft Entra ID using Conditional Access policies, named locations, and secure user registration.
77
ms.date: 03/04/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-assisted

learn-pr/wwl-sci/manage-implement-authentication-methods/4-implement-passwordless-authentication.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Implement Passwordless Authentication in Microsoft Entra ID
66
description: Learn how to deploy Windows Hello for Business, passkeys in Microsoft Authenticator, and FIDO2 security keys in Microsoft Entra ID — and match each method to the right user persona.
77
ms.date: 03/04/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-assisted

learn-pr/wwl-sci/manage-implement-authentication-methods/5-configure-self-service-password-reset.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Configure Self-Service Password Reset in Microsoft Entra ID
66
description: Learn how to deploy and configure self-service password reset (SSPR) in Microsoft Entra ID — including licensing requirements, SSPR-eligible authentication methods, registration enforcement, password writeback, and activity monitoring.
77
ms.date: 03/05/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-assisted

learn-pr/wwl-sci/manage-implement-authentication-methods/6-exercise-configure-authentication-methods.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: "Exercise - Configure Authentication Methods in Microsoft Entra ID"
66
description: "Hands-on exercise: enable the MFA registration policy in Identity Protection, require MFA for cloud admin portals using Conditional Access, and enable phishing-resistant sign-in with passkeys (FIDO2) in Microsoft Entra ID."
77
ms.date: 03/13/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-assisted

learn-pr/wwl-sci/manage-implement-authentication-methods/7-knowledge-check.yml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Module assessment
66
description: "Knowledge check"
77
ms.date: 03/05/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
module_assessment: true
@@ -18,25 +18,25 @@ quiz:
1818
choices:
1919
- content: "SMS one-time passcode"
2020
isCorrect: false
21-
explanation: "SMS OTP is susceptible to SIM-swapping and real-time phishing attacks, so it does not qualify as phishing-resistant."
21+
explanation: "SMS OTP is susceptible to SIM-swapping and real-time phishing attacks, so it doesn't qualify as phishing-resistant."
2222
- content: "FIDO2 security key"
2323
isCorrect: true
2424
explanation: "FIDO2 security keys use public-key cryptography bound to the origin, making them resistant to phishing and credential replay attacks."
2525
- content: "OATH hardware token"
2626
isCorrect: false
27-
explanation: "OATH TOTP codes are time-based passcodes that can be intercepted and replayed by a phishing site, so they are not phishing-resistant."
27+
explanation: "OATH TOTP codes are time-based passcodes that are often intercepted and replayed by a phishing site, so they aren't phishing-resistant."
2828
- content: "A security architect is designing MFA enforcement for all users in a Microsoft Entra ID tenant. Which mechanism does Microsoft recommend over per-user MFA or security defaults for most organizations?"
2929
choices:
30-
- content: "Enabling security defaults in the Entra admin center"
30+
- content: "Enabling security defaults in the Microsoft Entra admin center"
3131
isCorrect: false
32-
explanation: "Security defaults are a baseline for organizations without a Microsoft Entra ID P1/P2 license and do not offer the granular control that most organizations need."
32+
explanation: "Security defaults are a baseline for organizations without a Microsoft Entra ID P1/P2 license and don't offer the granular control that most organizations need."
3333
- content: "Enabling per-user MFA for every account"
3434
isCorrect: false
3535
explanation: "Per-user MFA is a legacy approach that lacks the context-awareness and flexibility of modern policy-driven enforcement."
3636
- content: "Using Conditional Access policies to require MFA"
3737
isCorrect: true
38-
explanation: "Conditional Access is the recommended MFA enforcement mechanism because it allows granular, risk- and context-based rules that can target specific users, apps, and conditions."
39-
- content: "A company is deploying passwordless authentication. Frontline workers share physical kiosks in a warehouse and do not have assigned Windows laptops. Which passwordless method is the best fit for this persona?"
38+
explanation: "Conditional Access is the recommended MFA enforcement mechanism because it allows granular, risk-based, and context-based rules that can target specific users, apps, and conditions."
39+
- content: "A company is deploying passwordless authentication. Frontline workers share physical kiosks in a warehouse and don't have assigned Windows laptops. Which passwordless method is the best fit for this persona?"
4040
choices:
4141
- content: "Windows Hello for Business"
4242
isCorrect: false
@@ -54,18 +54,18 @@ quiz:
5454
explanation: "The Microsoft Authenticator app code (TOTP) is a supported SSPR method that users can register and use to verify their identity during a reset."
5555
- content: "FIDO2 security key / passkey"
5656
isCorrect: true
57-
explanation: "FIDO2 security keys and passkeys are sign-in-only credentials. They can confirm a sign-in but are not available as verification methods during a self-service password reset flow."
57+
explanation: "FIDO2 security keys and passkeys are sign-in-only credentials. They can confirm a sign-in but aren't available as verification methods during a self-service password reset flow."
5858
- content: "Email address verification"
5959
isCorrect: false
6060
explanation: "Email is a supported SSPR method and is commonly used as an alternate contact verification option."
6161
- content: "A help desk technician needs to onboard a new employee who has no existing authentication methods registered. The technician wants to issue a short-lived credential that lets the employee securely complete first-time MFA registration. Which feature is designed for this purpose?"
6262
choices:
6363
- content: "Send a password"
6464
isCorrect: false
65-
explanation: "Sending a password does not provide a secure, time-limited credential for first-time authentication registration."
65+
explanation: "Sending a password doesn't provide a secure, time-limited credential for first-time authentication registration."
6666
- content: "A Conditional Access policy scoped to the 'Register security information' user action"
6767
isCorrect: false
68-
explanation: "This policy controls who can register, but it does not itself provide a credential that allows an unregistered user to authenticate for the first time."
68+
explanation: "This policy controls who can register, but it doesn't itself provide a credential that allows an unregistered user to authenticate for the first time."
6969
- content: "Temporary Access Pass (TAP)"
7070
isCorrect: true
7171
explanation: "TAP is a time-limited passcode issued by an admin that allows a user with no existing methods to sign in and bootstrap their first MFA registration, including passkeys and FIDO2 keys."

learn-pr/wwl-sci/manage-implement-authentication-methods/8-summary.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
title: Summary
66
description: Summary of implementing and managing authentication methods in Microsoft Entra ID, including MFA, passwordless authentication, and SSPR.
77
ms.date: 03/05/2026
8-
author: roberts
8+
author: r-c-stewart
99
ms.author: roberts
1010
ms.topic: unit
1111
ai-usage: ai-generated

learn-pr/wwl-sci/manage-implement-authentication-methods/includes/5-configure-self-service-password-reset.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ Key policy guidance:
4545
4646
## Enforce registration and configure password writeback
4747

48-
:::image type="content" source="../media/sspr-flow.png" alt-text="Activity flow diagram showing the SSPR user journey: user goes to aka.ms/sspr, verifies identity with registered methods, sets a new password, and writeback updates on-premises Active Directory when configured.":::
48+
:::image type="content" source="../media/password-reset-flow.png" alt-text="Activity flow diagram showing the SSPR user journey: user goes to aka.ms/sspr, verifies identity with registered methods, sets a new password, and writeback updates on-premises Active Directory when configured.":::
4949

5050
Use Conditional Access targeting **Register security information** to enforce registration. For first-time users or recovery scenarios, issue a **Temporary Access Pass (TAP)** to bootstrap secure enrollment.
5151

learn-pr/wwl-sci/manage-implement-authentication-methods/index.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ metadata:
44
title: Manage and Implement Authentication Methods in Microsoft Entra ID
55
description: "Learn to plan, deploy, and manage secure authentication in Microsoft Entra ID. This module covers authentication methods, MFA with Conditional Access, passwordless options, and self-service password reset."
66
ms.date: 03/13/2026
7-
author: roberts
7+
author: r-c-stewart
88
ms.author: roberts
99
ms.topic: module
1010
ms.service: entra-id
@@ -41,4 +41,4 @@ units:
4141
- learn.wwl.manage-implement-authentication-methods.knowledge-check
4242
- learn.wwl.manage-implement-authentication-methods.summary
4343
badge:
44-
uid: learn.wwl.introduction-entra-agent-id.badge
44+
uid: learn.wwl.manage-implement-authentication-methods.badge

0 commit comments

Comments
 (0)