Forum Discussion

JRSpringham's avatar
JRSpringham
Copper Contributor
Oct 12, 2020

MFA expected behaviour - Mac devices

We have implemented MFA for a company who use stand-alone Mac devices (log in as local users) running the latest OS and Outlook, and they are currently only allowed to remember MFA on a device for 1 day.

Each day when prompted for MFA, they are also prompted to input their 365 username and password; is this expected behaviour for this setup, or should it only display the MFA approval prompt?

 

We have lots of other clients who use MFA for 365 but these are mostly hybrid identities or federated domains and whilst I don't expect username+password prompts to occur for these, I would expect it to occur for the scenario above, but just wanted some clarification.

 

I also expect this to be down to the individual device\app settings with regards to cached credentials etc. but my unfamiliarity with Mac makes me uncertain.

 

Thanks in advance!

Identity Management
microsoft 365
    • JRSpringham's avatar
      JRSpringham
      Copper Contributor
      Oct 12, 2020

      JanBakkerOrphaned Thanks for the response.

       

      It's a very basic setup - each user account has been individually enabled for MFA (they have then signed in to Office.com and configured MFA with the Authenticator App) only.

      No Conditional Access policies or any MDM controlling the Mac's; they simply login with local accounts to the Mac's and have Outlook etc. installed.

       

      I'm not trying to get it to pass-through or anything, just establish what the baseline behaviour should be for this basic setup and to understand if being prompted for credentials etc. is normal under the circumstances.

       

      If you need any further info, happy to supply it.