Authentication Methods

The Windows Workstation MFA Agent supports multiple authentication methods. The method presented to a user at login is determined by the Adaptive Auth Journey configured for them in AdminX.

---

Available Authentication Methods

Method	Requires Mobile App	Works Offline	Minimum Version
Password + OTP	✅ (for OTP)	✅ (Account OTP only)	All versions
Push Notification	✅	❌	All versions
QR Code	✅	❌	All versions
FIDO / 1Key	❌	❌	All versions
SMS / Email / Voice OTP	❌	❌	v2.0.6.0+
Behavior Authentication + PIN	❌	✅ (cached PIN)	v2.1.2.0+
Run As / UAC Elevation	Depends on method	✅	All versions

Note: The methods available to a user at login depend entirely on the Adaptive Auth Journey configured for them in AdminX. A method listed here will not appear at login unless it is configured in a journey.