Well, I'm on Android, so that wouldn't apply, at least not directly. I've never investigated biometrics. I still don't think they're necessary here. Tapping th

Well, I'm on Android, so that wouldn't apply, at least not directly. I've never investigated biometrics. I still don't think they're necessary here. Tapping the notification, nowadays, requires unlocking the screen. That's PIN entry #1. Then, MS Authenticator itself requires you to enter your lockscreen PIN, for #2. (Some time ago — months? years? — it used to be you could acknowledge the MFA request from the lock screen.) Edit: OMG it's a setting! I've disabled this nonsense. I swear I looked when it was first introduced, but IDK. MS & defaults. I love Cunningham's Law sometimes, this is going to make MS Auth somewhat less annoying.