Number matching in MFA messages will be activated across the entire client organization starting May 8, 2023. Microsoft will apply number matching to push notification authentication in the Microsoft Authenticator app. The approve/deny function will therefore be replaced.

Currently, number matching is not supported for Apple Watch and will not be included in the January update of the app. This is because it is incompatible with authenticatior security factors.

For organisations using the NPS extension, a registry key change is required as the extension is not supported by number matching. In this case, pass/fail will still be used.

Number matching is already available and the recommendation is to enable it in the short term for higher login security.

In January 2024, the Microsoft 365 legacy policies for MFA and SSPR will be phased out. In the future, the management will be done from Authentication methods in Azure.