Body
Some Microsoft Entra multifactor authentication (MFA) methods work better than others for people with visual, hearing, motor, or cognitive disabilities. This article covers the MFA methods available at the University of Maine System (UMS) that support accessibility needs, and what to do if none of them meet your needs.
Detailed Information
Passkeys
Passkeys sign you in with a biometric (fingerprint or face recognition) or a PIN on your device, so you never have to type or remember a password. This makes them one of the more accessible MFA options at UMS.
FIDO2 security keys (YubiKey)
A FIDO2 security key, such as a YubiKey, is a physical device you plug in or tap to sign in. You confirm your identity with a fingerprint scan or a PIN instead of typing a password, which can help people who find typing passwords or codes difficult, including people with physical disabilities.
ℹ️ For more information: Hardware Security Key (FIDO2) (Entra MFA)
Windows Hello for Business
Windows Hello for Business uses biometrics (fingerprint or face recognition) or a PIN built into supported Windows devices, so there is no password to type. This can help people with physical or cognitive disabilities who find password entry difficult, while keeping sign-in fast and secure.
ℹ️ For more information: Windows Hello (Entra MFA)
Other passkey options
You can also set up a passkey stored in the Microsoft Authenticator app itself, which is separate from the push notification method described below. An iCloud Keychain passkey and a Google Password Manager passkey work the same way and stay with you automatically across your devices signed in to that account.
Microsoft Authenticator
The Microsoft Authenticator app supports both quick-approval push notifications and traditional time-based codes for MFA. It is compatible with assistive technologies, including screen readers, making it accessible for people with visual impairments.
If the MFA prompt is missed, users are not locked out of their account. They can restart the sign-in process without losing their primary login state (username/password).
ℹ️ For more information: Microsoft Authenticator App on Android (Entra MFA)
If none of these options meet your needs
If a disability makes the available MFA options inaccessible to you, an accommodation can be requested through the MFA exemption process.
ℹ️ For more information: MFA Exemptions and Accessibility
Additional resources
Environment
- Microsoft Entra ID (Azure AD)
- Microsoft Authenticator
- FIDO2 security keys (YubiKey)
- Windows Hello for Business
- Passkeys (iOS, macOS, Android, Chrome)
- All UMS applications using Entra SSO