Microsoft Entra External ID
AuthenticationMultifactor Authentication Customers
In brief
The documentation now states that TOTP authentication in external tenants will become generally available at the end of November 2026, with rollout completing in early December 2026.
What Entra admins need to know
Administrators can plan for the rollout timeline; no action is specified.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
ms.topic: concept-article
ms.date: 09/02/11/06/2026
ms.custom: it-pro, references_regions
ai-usage: ai-assisted
Time-based one-time password (TOTP)
TOTP is a standards-based method that generates a temporary verification code in Microsoft Authenticator or a supported third-party authenticator app. It works as a second-factor verification method for MFA in external tenants.
When TOTP is enabled and MFA is required, users register an authenticator app by scanning a QR code. For subsequent MFA challenges, users enter the verification code displayed in their authenticator app.
TOTP is a standards-based method that generates a temporary verification code in Microsoft Authenticator or a supported third-party authenticator app. It works as a second-factor verification method for MFA in external tenants.
When TOTP is enabled and MFA is required, users register an authenticator app by scanning a QR code. For subsequent MFA challenges, users enter the verification code displayed in their authenticator app.
@@ -3,7 +3,7 @@ title: MFA in external tenants description: Learn about using MFA to secure apps in your external tenant and enabling email one-time passcodes (EOTP), SMS, time-based one-time passwords (TOTP), or passkeys (FIDO2) for verification. ms.topic: concept-article-ms.date: 09/02/2026+ms.date: 11/06/2026 ms.custom: it-pro, references_regions ai-usage: ai-assisted @@ -90,6 +90,9 @@ Starting January 2025, certain country codes will be deactivated by default for ## Time-based one-time password (TOTP) +> [!NOTE]+> TOTP authentication in external tenants will become generally available at the end of November 2026. Rollout will finish in early December 2026.+ TOTP is a standards-based method that generates a temporary verification code in Microsoft Authenticator or a supported third-party authenticator app. It works as a second-factor verification method for MFA in external tenants. When TOTP is enabled and MFA is required, users register an authenticator app by scanning a QR code. For subsequent MFA challenges, users enter the verification code displayed in their authenticator app.