Forced Authenticator App

[Steve101]

We introduced MFA over a year a go outside of our environment. Since around the summer time, Microsoft have started enforcing the authenticator app. The trouble is it doesn't work for everybody.

 

This starts the process of, sign in to office using MFA to mobile. Office then says to download authenticator app and doesn't let you proceed.

 

 

Does anybody know where this is coming from as it certainly isn't being pushed out by us and I can't find the setting to turn it off?

[NegativeKillDeath]

Are the users trying to set up Authentication off site? There is a conditional access policy to restrict that and only allow from trusted locations. Might that be turned on?

[robintech]

might be the nudge campaign is enabled and they have snoozed three times , closing the browser window counts as snoozing

https://entra.microsoft.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/RegistrationCampaign/fromNav/

[Olliedawg]

might be the nudge campaign is enabled and they have snoozed three times , closing the browser window counts as snoozing

https://entra.microsoft.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/RegistrationCampaign/fromNav/

 

Thats it.

 

These are my settings & my tenant is unaffected. I don't want MFA enforced until I can get A3 licences sorted. We just use MFA on a per-user basis at the mo for IT staff/upper management

 

[Steve101]

Are the users trying to set up Authentication off site? There is a conditional access policy to restrict that and only allow from trusted locations. Might that be turned on?

 

Conditional access is already enforced, they use their mobile phones to authenticate off site, then Microsoft is forcing authenticator app afterwards.

[Steve101]

might be the nudge campaign is enabled and they have snoozed three times , closing the browser window counts as snoozing

https://entra.microsoft.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/RegistrationCampaign/fromNav/

 

This looks like it, Microsoft managed Hopefully this stops it.

[NeoNebula]

The issue appears to be related to the auto-enable authentication app not working for all users. This may be caused by changes in security settings or software updates. We recommend that you review your security settings in Azure AD and Office 365 to ensure that all MFA settings are configured correctly and meet your requirements.