MFA Fatigue

dj562006
New Contributor II

Many of our users are complaining about MFA fatigue on their Macs. We are a Azure shop and use Microsoft Authenticator. 
What could be causing the multiple MFA prompts per day all of the sudden and what would a solution be? 
So far we have thought possibly Jamf Connect is improperly configured. Or potentially adding the "Windows Accounts" Chrome extension since that is a requirement on the PC side. 

Any thoughts on this issue? 

2 REPLIES 2

AJPinto
Honored Contributor III

I would recommend pinging Microsoft on this. JAMF Connect is only routing authentication to Azure, its up to Azure to figure out how to behave with that authentication and if MFA is needed or not.

 

Someone probably changed a setting somewhere in Azure, which had a butterfly effect on something else totally unrelated with how Azure is nested. 

SCCM
Contributor III

is things been in preview for over a year, but i wouldnt put it into production as it could get pulled at anytime:
https://learn.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin
from the users microsoft security page you can normally see what is requesting authentication. Hopefully your org has code verification enabled and the staff are not just authenticating hackers