5 ms·

Yep. Azure is just awful. With Google SSO, I log in and do MFA once per year or so on trusted devices and any further prompt beyond that would be extremely sus

• trevorishere 5y ago
  It's not Azure, it is how your organization decides to implement MFA. The only time re-MFA'ing is 'required' is when your password expires (if it does) as your token expires. Otherwise, you could have 365 day token lifetimes if your organization configured it. Or greater.
  • tapland 5y ago
    I've never heard of anyone with azure properly set up then. In two orgs I've had the exact described behavior. Even for a school that uses azure =(
    • brazzledazzle 5y ago
      Microsoft gives well meaning but overzealous security teams too many knobs. It’s one of the reasons they can check off so many security checkboxes.
  • aiisjustanif 5y ago
    Friendly reminder to revoke your sessions when resetting compromised users. :)
• TuringNYC 5y ago
  Forget Azure. Even Outlook/Teams flips apps between Teams/MSAuthenticator over and over. My iPhone goes into strange loops. Sometimes, its logged-out but doesnt show it and just doesnt update anything. Its nuts how vast the chasm is between Azure/Outlook/Teams vs AWS/Google.
  • bogwog 5y ago
    There’s nothing more frustrating to me than seeing a billion/trillion dollar company being so lazy. That’s like spitting in the face of capitalism.
    • k_sze 5y ago
      Nope. This is capitalism working as intended. They keep making money regardless of how crappy their products are. The problem is that those who suffer are not the ones making the purchase decision.
      • bogwog 5y ago
        Capitalism allocates society's wealth towards the most productive members, in order to promote more productivity (in theory anyways). Microsoft has collected a massive amount of wealth, yet they're not being productive with it. In effect, they're wasting society's time since we aren't getting a return for that investment. That's unforgivable since people only live for a few decades, so Microsoft's misuse of wealth means that other businesses/individuals who would've used it to produce new/better technologies aren't able to. It's laziness, which is one of the worst traits a member of a capitalist society can have, and it's especially heinous when it's a trait possessed by an actor in such a powerful position. Thus, many of us will die without ever seeing a real hoverboard. So when you're on your deathbed and you don't have a hoverboard, know that it's Microsoft's fault (and the government regulators who should've stopped them). EDIT: Also applies to Apple, Google, Amazon, etc.
        • zwirbl 5y ago
          This explanation sounds like capitalism is a thinking being
        • ako 5y ago
          That is not what capitalism is, according to wiki: "Capitalism is an economic system based on the private ownership of the means of production and their operation for profit." There's nothing in here about allocating wealth, or promoting productivity. It's all about private ownership. The owner decides how to make money, and what to do with the profits. If they decide to use it for non-productive goals, that's the freedom of the owner. Capitalism is to opposite of a society consciously allocating anything for a specific purpose, it leaves it up to every individual.
• anitil 5y ago
  I didn't know that it was abnormal to be doing it multiple times a day! I just thought this was how life goes now
  • datavirtue 5y ago
    I have never been pinged multiple times per day. In fact, I have never been inconvenienced by this at all and all my stuff lives in Office365 and Azure. No idea where all this is coming from in this thread.
    • technion 5y ago
      I think it depends what people mean here. As a general Office 365 user, I logon to my laptop and Outlook, Teams, Onedrive etc hasn't prompted for MFA in months. However, I have many scripts that require both "Connect-AzureAD" and "Connect-ExchangeOnline" at the start. More frustratingly some legacy features from Connect-MSOL" haven't made it into the newer scripts yet and thus often that's also needed. Those scripts take three separate logons with three separate MFA prompts, because it seems incapable of determining that I literally just authenticated and can I please use that session.
    • miked85 5y ago
      I'm sure there are settings on the admin side to control this, but I easily get a dozen Azure auth requests a day.
• Melatonic 5y ago
  Google does have a more stringent mode that can be enabled on high profile / admin accounts that requires MFA more often and faster auto log outs. But it is still not too bad.
• dzhiurgis 5y ago
  FWIW GCP asks me to relogin like every 2-3 days, does not ask me for 2fa tho