Microsoft Authentication issue

[RayDonovan]

Morning all,

For work based programmes, we've used Microsoft Authentication app where you entered your password and received a notification on the phone to approve.

This went wrong yesterday and now the authenticator app s asking to enter a 'code' which never seems to work stating the code is wrong. Spent 5 hours with IT support yesterday and no further forward.

Any ideas what may have gone wrong? Checked the MFA portal for work and the correct phone and phone number is registered with everything seemingly OK to receive app notifications....

Thanks

[Mr Squarekins]

Interesting. I had a problem with the authenticator yesterday too. I was able to get things working by getting a code texted to me rather than use the App.

[RayDonovan]

Mr Squarekins said:

Interesting. I had a problem with the authenticator yesterday too. I was able to get things working by getting a code texted to me rather than use the App.

Cheers. Apparently, we shouldn't be using the 2FA which is apparently what it's trying to do. Been on with IT now for 24 hours and nothing..

[jpringle819]

RayDonovan said:

Been on with IT now for 24 hours and nothing..

Just ask them to reset your MFA, this we require you to redo the app. You might also be able to redo it yourself here https://aka.ms/mfasetup

https://www.clouddirect.net/knowledge-base/KB00133...

[RayDonovan]

jpringle819 said:

RayDonovan said:

Been on with IT now for 24 hours and nothing..

Just ask them to reset your MFA, this we require you to redo the app. You might also be able to redo it yourself here https://aka.ms/mfasetup

https://www.clouddirect.net/knowledge-base/KB00133...

Tried that and it didn't work.

The IT support just called my MFA 'dirty' and it needs another team to sort it apparently.

[MikeGTi]

RayDonovan said:

Tried that and it didn't work.

If resetting MFA doesn't work, they should be able to remove MFA from your account.

Assuming this is for M365?

[RayDonovan]

MikeGTi said:

RayDonovan said:

Tried that and it didn't work.

If resetting MFA doesn't work, they should be able to remove MFA from your account.

Assuming this is for M365?

Correct, 365. I think your last point is the next option

[Chimune]

How good are your IT dept? I mean is it a 1 man band or large corp ?

MfA fatigue is an attack vector...

https://www.beyondtrust.com/resources/glossary/mfa...

[RayDonovan]

Chimune said:

How good are your IT dept? I mean is it a 1 man band or large corp ?

MfA fatigue is an attack vector...

https://www.beyondtrust.com/resources/glossary/mfa...

Large Corp, +45k employees

[snuffy]

RayDonovan said:

Morning all,

For work based programmes, we've used Microsoft Authentication app where you entered your password and received a notification on the phone to approve.

This went wrong yesterday and now the authenticator app s asking to enter a 'code' which never seems to work stating the code is wrong. Spent 5 hours with IT support yesterday and no further forward.

Any ideas what may have gone wrong? Checked the MFA portal for work and the correct phone and phone number is registered with everything seemingly OK to receive app notifications....

Thanks

MS updated authenticator a few months ago so that you know also need to enter the 2 digit code it displays when you log on to your accout into your phone.

[deckster]

Sounds like an excellent opportunity to get out on the golf course until they've sorted it out.

[RayDonovan]

deckster said:

Sounds like an excellent opportunity to get out on the golf course until they've sorted it out.

Still locked out FFS. Lucky, I'm out of the office for most of today but still a pain. In the UK HO tomorrow so hopefully someone there can sort it...

[Sheepshanks]

I guess with 45K people this is not your basic Microsoft 365 set up - bit odd that IT can't sort it though, when I worked in a big company we (engineers) were always messing machines up and IT generally sorted them in the twinking of an eye.

I note you said it shouldn't be using MFA (which seems slightly odd) but in cases where it is used and Microsoft have now mandated number matching (as someone mentioned earlier) there are reports that older versions of the Microsoft Authenticator Apps don't like it and need to be removed and the latest on installed.

[RayDonovan]

Luckily I'm in the office tomorrow and they're going to re-build everything apparently.

Apparently an issue between Apple & Microsoft that has caught us by surprise. Just checked and I've spent 10 hours on the phone over the last couple of days..