User prompted to enter 2FA code in MS Authenticator app

Question

One of the staff in my company is prompted to enter the code in Microsoft authenticator everytime he tries to login to sharepoint or access any other app related to the company Office 365 account. As a O365 admin i have disabled and then enabled MFA, deleted all existing app passwords and restore multifactor authentication on all remembered devices. Google Chrome and MS Edge browser remembers his O365 password but is prompted to enter the authentication code on his MS Authenticator app on the phone.

I want the user to continue using the MS Authenticator app, but the issue is that even if he closes the browser and re-opens it, he is again prompted to enter the 2FA code for the MS Authenticator app. Is there a way to stop entering the 2FA code for 90 days or so or to identify that the user is trying to log in from a trusted device so that they are not being asked to enter the 2FA in the MS Authenticator app?

Answer 1

Hi @Abhi Kenavdekar

Thanks for posting this query.

I'm Ankush and I'll attempt my best to help you out.

There 'is' a feature through which you can let your users stop entering the 2FA code for a specified number of days.

After enabling this feature, the user's device will become trusted.

You can enable it through Entra Admin Center.

Scroll to bottom and find the option,

Please view the link for more info,

https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-mfasettings#remember-multi-factor-authentication

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Answer 2

Hi Ankush, Ever since i made the change i get this exclamation mark on top of Outlook windows and it says there is a problem with the account, when i click continue it akas me several times to re-enter 2FA code on MS authenticator app.

Answer 3

Hi Ankush.

Yes the issue is still happening, the way I fixed it for each individual employee was by entering the O365 password and the MS authenticator app code multiple no of times (atleast 5 times). I didnt expect the change that you suggested above (changing to 90 days) would affect everyone in the company.

Will the staff have to re-enter the MS authenticator app code multiple times again after 90 days?