Forum Discussion

luvsql's avatar
luvsql
Steel Contributor
Mar 09, 2021

MFA without a Cellphone

This is becoming a bigger issue more and more.  We cannot, as a company, require our Employees to use a personal cellphone to get text codes or install work apps to authenticate our work accounts.  ...
azure
TravisRoberts's avatar
TravisRoberts
Iron Contributor
Have you considered Hybrid Azure AD Join the user’s computers and then create a conditional access policy that disables MFA for log ins from a hybrid joined device? The logic is, the hybrid joined device is a second factor in the log in process.
Chet2142's avatar
Chet2142
Copper Contributor
Sep 09, 2021

I dont see that as a valid option. Yes people can use hybrid AD so the device you are on is a trusted device on a trusted IP so it wouldn't require the MFA while on premise. However you still want MFA to be registered so that would-be attackers outside are not able to register your MFA instead. You still need the end user to be able to register the MFA so others cannot. TravisRoberts 

  • II_Charon_II's avatar
    II_Charon_II
    Copper Contributor
    Jun 03, 2024

    Chet2142   I would like to think, your point is clearly understood, at least from this side of the looking glass.   

    I don't get it.  I've done voice verif. by a robot calling me on my landline,  'Hit 9 to  continue this call"... "please enter the following phrase on your computer".  It's not that far of a conceptual reach, you know, even dell can kinda grasp that, kinda.

     

    I keep hearing that, that is an option, even from the mighty MS AI Bot, that is a baffling pt, till you paste a screen shot, showing that there is no option for a call. 

     

    But, i'm sure it's just me, why on earth would it make sense to continue to ask the same questions, but somehow, in my gray matter, i'm thinking i'm going to get some 'NEW DATA',  and 3 hrs later i relised what happened last time,, yah, made to d/l this get that, fill this out, blah blah blah.  Waste 3 hrs of your time, with the exact same out come as the time before and the time before that.

Resources