MSP Process inside Microsoft Authenticator
Everyday helpdesk requests.
Your familiar Authenticator app.
Luke F.
Northwind Dental
- 00:00
j.kim@northwinddental.com
A credential request comes in by phone.
- 00:09
Authenticator push sent
Registered device: iPhone 15
- 00:18
Request approvedOK
Biometric approval at headquarters
- 00:27
Conditional Access policies
Compliant device, low sign-in risk
- 00:45
+2 stepsThe same userBlocked
Bring Microsoft Authenticator into your team's AI automation, with push approvals through the app your clients already have. Your team can handle privileged requests without a new app or enrollment, with a full Entra ID tenant audit.
- Native approval flow
- Push
- Your tenant's identity records
- Entra ID
- New app needed
- No
MSP Process + Microsoft Authenticator
We bring AI automation to your MSP across every channel your clients use, with Microsoft Authenticator handling privileged request approvals. Connect the app your clients already use to your helpdesk process, with approval records in the tools your team works in.
- Native Authenticator push approvals
- Each privileged helpdesk request sends an Authenticator push, so your clients can approve it through their existing app.
- Your Entra ID records
- The integration reads identities directly from Entra ID, so your team doesn't need a separate identity store.
- Face ID or fingerprint
- Your clients approve requests with Face ID or a fingerprint on their registered device, using phishing-resistant biometric approval.
- Your Conditional Access policies
- Your Conditional Access policies apply to each request, bringing device, location and sign-in risk into the approval process.
- Your Entra ID audit trail
- Each approval check appears automatically in Entra ID audit logs, keeping the record within your existing tenant.
- Approval before enrollment resets
- Your helpdesk can reset enrollment only after the user approves, keeping that requirement in place for your team.
START WITH THE BASICS
Connect your existing app.
Put approvals to work.
Get set up in four steps, from connecting Entra ID to recording approvals alongside your team's requests. Most MSPs are live the same day, using Microsoft Authenticator for approvals and Entra ID for audit records.
Connect through Entra ID
Connect through Entra ID to bring your existing identities into the process, with Conditional Access policies applied automatically.
Send the approval request
When a privileged helpdesk request comes in, the integration sends an Authenticator push to the user's registered device.
Approve on the device
Your client approves the request with Face ID or a fingerprint on the device they've already registered.
Record alongside the ticket
The approval trail is written to your PSA (professional services automation) ticket and the Entra ID audit log.
WHAT THIS LOOKS LIKE
A request comes in.
Approval follows your policies.
For a credential request by phone, your client approves the Authenticator push before the approval trail reaches the ticket. We bring verification into that process so your team can handle the request with the user's approval recorded.
Without MSP Process
Authenticator on login, but helpdesk bypass.
Unknown caller
Says: Luke F., Northwind Dental
- 01
Login flow uses Authenticator, but helpdesk requests don't.
- 02
Helpdesk resets credentials with no Authenticator push.
- 03
Attacker bypasses Authenticator by social-engineering the…
helpdesk.
- 04
Authenticator now protects the attacker's new device.
With MSP Process
Authenticator on every privileged action.
Unknown caller
Says: Luke F., Northwind Dental
- 01
Every helpdesk request fires an Authenticator push to the…
registered device.
- 02
User approves on a Conditional Access to compliant device.
- 03
Helpdesk default-deny on requests without Authenticator…
approval.
- 04
Full audit chain
device, location, biometric, time, in Entra ID.
LET'S TALK AUTOMATION
Your Microsoft Authenticator investment.
More helpdesk work covered.
Connect through the application programming interface to bring Microsoft Authenticator approvals into your team's privileged helpdesk requests.
Tell us about your MSP.
