MFA across 365 tenants

[Guest Guest]

Our staff access their payslips etc via Oracle provided by BCC. They access Oracle via their school 365 accounts.

 

I’ve recently had a number of staff who needed to re-register the authenticator app. They complete this, however, when attempting to access Oracle they don’t receive the push notifications and BCC don’t allow OTP.

 

It was my understanding that as they registered the app in our tenant they should now be able to access Oracle using the app?

 

As I’m not a direct employee of the school i don’t have an account to play around with

 

Has anyone else had this?

[foofighterjim]

This is part of the confusion with Oracle (well with BCCs implementation of it anyway). The MFA account for Oracle is actually on BCCs domain (@birminghamcitycouncil.onmicrosoft.com), as a result you have no access to reset the MFA device for that account. The person in charge of HR will need to contact the council to remove the old MFA connection and then wait for however long for them to actually action it.

 

We’ve had a few staff change phones over the summer and it has caused the same problem.

[Guest Guest]

This is part of the confusion with Oracle (well with BCCs implementation of it anyway). The MFA account for Oracle is actually on BCCs domain (@birminghamcitycouncil.onmicrosoft.com), as a result you have no access to reset the MFA device for that account. The person in charge of HR will need to contact the council to remove the old MFA connection and then wait for however long for them to actually action it.

 

We’ve had a few staff change phones over the summer and it has caused the same problem.

 

One of the users experiencing this is the HR manager and has had no response from them

[foofighterjim]

Staggering when you consider how much they've spent on this system, to then not implement or support it properly. Its just payslips though, its not like it is a legal requirement to provide them or anything

[Michael]

That's correct, the process involves signing into BCC's O365 tenant. In my experience the following can stop Oracle working -

 

- Change of handset

- Change of number

- Change of name, which subsequently means change of email address

 

- Separately - change of O365 tenancy, even if you're using the same domain. This requires all personnel to be re-enrolled as new.

 

Ideally a self-service portal for Business Managers is what's required for the top three. Having to log a call each time just doesn't seem sensible and clearly wasn't considered at the procurement stage.