4 ms·
I don’t get it. What do you do if preferred method is genuinely not available to the user?
by wodenokoto 3y ago
I don’t get it. What do you do if preferred method is genuinely not available to the user?
- mschild 3y ago> If they can't use the method they were prompted to use, they can choose a different MFA method to sign in Let you use a different method you signed up for.
- pc86 3y agoMy guess is that it's in the second sentence of the article :)
- reportgunner 3y agoSounds like you can just click through to the least secure option.
- angry_octet 3y agoPresumably this allows them to change the confidence statistics for logins, so that, e.g., SMS 2F is considered more likely to be an attacker. SMS 2F from a different location to a previous certificate/FIDO2 login might be denied or alerted. Also, they’re trying to force people into using the Microsoft Authenticator, which is an active telemetry collector, vs e.g. Google Authenticator, which is 100% offline and TOTP only.