Acceptable hardware tokens

(3) Share

Report

Posted on by MC-16071209-0

We log onto a customer's portal that uses Microsoft Dynamics. One of the three options to authenticate is by using a hardware token that generates a six digit code. I have looked for a list of hardware tokens that are compatible with Microsoft Dynamics, however, I haven't been able to locate one. Is there such a list of hardware tokens that will work with this Microsoft Dynamics? Thanks for your help!

Categories:

Dynamics 365 general

I have the same question (0)

All responses (3)

Answers (1)

Sort by

Verified answer

PerezAguiar Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

Hey!

Can you provide some more details? when you state "we log into a cusotmer's portal" what do you mean? Are you accessing something like Customer.crm4.dynamics.com? or Customer.powerappsportal.com?

In most scenarios, Dynamics DOES NOT handle authentication but instead, waiting for an auth token that is generated by another service (which is why, amongst the pre-requisites, you have several Azure.com, Office.com and Login.microsoft.com). Therefore, is that other service in charge of authenticating and accepting OTP tokens.

Public documentation points to https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-oath-tokens#hardware-oath-tokens-preview as this being a preview functionality, so it shouldn't be used in Production, but points to any device using OTP as long as they are OATH-TOTP SHA-1 and SHA-256 .

Regards,

Was this reply helpful? Yes No
MC-16071209-0 12 on at

Like (1)

Report
Copy link

Link copied!

We log onto this kind of domain, Customer.crm4.dynamics.com.

Was this reply helpful? Yes No
Suggested answer

CU20031754-0 2 Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Deepnet have a range of Microsoft compatible, oath compliant, TOTP hardware tokens can be used - all on this linked page are suitable for what you need. Regardless of what tokens (or form factor) you go with make sure your token is time based (TOTP) and not event based (HOTP), and that they are SHA1 encoded.

Was this reply helpful? Yes No