Forum Discussion

Paul Mitchell's avatar
Paul Mitchell
Brass Contributor
Jun 18, 2019

MFA/Azure AD Joined - Issues with Teams?

Using my account as an example, I have a Windows 10 desktop and laptop. The desktop is Azure AD registered and the laptop is Azure AD joined. I have MFA enabled for my account. When I sign into Microsoft Teams or any other Microsoft application (SfB , Outlook etc) on my Desktop, I don’t have to verify my login via MFA until the 90-day token expires. When I sign into the same applications on my laptop I experience the same except for Microsoft Teams. Each time I log into Microsoft Teams I am prompted to Approve the sign-request.

Does anyone know why Microsoft Teams behaves differently from other Microsoft applications?

    • ChrisWebbTech's avatar
      ChrisWebbTech
      MVP
      My first thought but it's supposed to default to it now I think, or maybe it hasn't yet. Are you signing out on purpose? Cause when you sign out of Teams it switches it over to non modern auth ditches token etc. which is probably why it is prompting on a non Azure Joined machine since your machine can't be 2nd factor like the Joined machine can.
      • Paul Mitchell's avatar
        Paul Mitchell
        Brass Contributor

        Yes, I am signing out, which I assume must be ditching the token as you suggest.  However, I only experience this behaviour on the Azure joined device?  My AD registered device never appears to ditch the token and I am never prompted if I sign out, which is odd, I would expect it to be the other way round?  My user documentation will need updating to reflect this, we are in the process of rolling out teams to our users.  ChrisWebbTech 

  • Yrol1325's avatar
    Yrol1325
    Copper Contributor
    Some update of this issue?
    I have sama situation on Azure AD Hybrid Joined device with Teams application.

Resources