You can set the system so it’s optional. That way they can claim its standards compliant and Microsoft Authenticator is just another implementation of a standar

You can set the system so it’s optional. That way they can claim its standards compliant and Microsoft Authenticator is just another implementation of a standard. That is Embrace. But there are enhancements, where the Microsoft Authenticator can enforce extra restrictions, that you can require. That is Extend. And then of course your users can’t login unless they use the Microsoft Authenticator. That is Extinguish.