Hi all,
I lead a small IT team comprising of myself and 4 techncians managing just under 50 schools. I am making it a requirement that all our schools we have global administrator access to have app based MFA setup for access. Currently we have an office mobile receiving SMS codes which we request from our admin staff who are in office during the weekdays which we need to request over teams. I don't find SMS authentication secure and this also limits our access to our portals when attempting to do out of hours work.
My ideal setup would be app based authentication that can be shared with all my technicians using a single login. I'm aware MS authenticator can be signed in on multiple devices, however I'm seeing conflicting reports on whether the passcodes actually sync across devices, or whether restoring the accounts saved on another device will de-activate the device the accounts were backed up from.
Any one else in a similar position or have suggestions on best practice to work around this?