diff --git a/docs/identity/authentication/how-to-authentication-qr-code.md b/docs/identity/authentication/how-to-authentication-qr-code.md index b06d900b61e..d8532a957ff 100644 --- a/docs/identity/authentication/how-to-authentication-qr-code.md +++ b/docs/identity/authentication/how-to-authentication-qr-code.md @@ -41,7 +41,7 @@ This topic covers how to enable the QR code authentication method in the Authent ## Enable QR code authentication method -You can enable the QR code authentication method by using the Microsoft Entra admin center or Microsoft Graph API. +You can enable the QR code authentication method by using the Microsoft Entra admin center or Microsoft Graph API. ### Enable QR code authentication method in the Microsoft Entra admin center @@ -87,6 +87,9 @@ This example enables QR code authentication for a group, with a PIN length of 10 204 No Response ``` +> [!NOTE] +> Once QR code authentication is scoped to a user e.g. via a group, the user must first successfully complete an interactive or non-interactive authentication before the QR code can be used. Whilst most users will likely complete a successful authentication before they use QR code authentication, some may not which will result in an _Incorrect QR code_ error. + ## Add QR code authentication method for a user You can add a QR code authentication method for a user by using the Microsoft Entra admin center, My Staff, or Microsoft Graph API. At a time, only one active QR code auth method is allowed. Standard QR code is generated during 'Add authentication method'. You can add Temporary QR code, which is short-lived, if user is not carrying Standard QR code. You can delete Standard/Temporary QR code to add a new Standard/Temporary QR code. A user can have only one Standard and one Temporary QR code active at any point of time.