Skip to main content
Question

MFA Fatigue

  • March 6, 2023
  • 2 replies
  • 7 views

dj562006
Forum|alt.badge.img+4

Many of our users are complaining about MFA fatigue on their Macs. We are a Azure shop and use Microsoft Authenticator. 
What could be causing the multiple MFA prompts per day all of the sudden and what would a solution be? 
So far we have thought possibly Jamf Connect is improperly configured. Or potentially adding the "Windows Accounts" Chrome extension since that is a requirement on the PC side. 

Any thoughts on this issue? 

2 replies

AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • 2801 replies
  • March 6, 2023

I would recommend pinging Microsoft on this. JAMF Connect is only routing authentication to Azure, its up to Azure to figure out how to behave with that authentication and if MFA is needed or not.

 

Someone probably changed a setting somewhere in Azure, which had a butterfly effect on something else totally unrelated with how Azure is nested. 


Forum|alt.badge.img+8
  • Valued Contributor
  • 148 replies
  • March 7, 2023

is things been in preview for over a year, but i wouldnt put it into production as it could get pulled at anytime:
https://learn.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin
from the users microsoft security page you can normally see what is requesting authentication. Hopefully your org has code verification enabled and the staff are not just authenticating hackers