Smart card authentication in Active Directory, are user passwords still used?

Question

Active Directory

If you practice setting up two-factor authentication in Windows Active Directory for users, is it possible in this case to continue to use the account password if it needs to be entered in another third-party application that needs to verify the password of this account? Are there any "pitfalls" in this use case?

Answer 1

I tested two-factor authorization, and as far as I remember, an additional method of authorization using smart cards is simply added there. Those. login and password will still work, unless it is specifically disabled in the GPO settings (but this is not accurate).
If there is a day of free time - it's easy to check on virtual machines - I specifically check this there before implementing it into the infrastructure. Very comfortably.