Home

Authenticator App - passwordless - when prompted?

%3CLINGO-SUB%20id%3D%22lingo-sub-840309%22%20slang%3D%22en-US%22%3EAuthenticator%20App%20-%20passwordless%20-%20when%20prompted%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-840309%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei'm%20asking%20myself%20when%20the%20MS%20Authenticator%20App%20should%20ask%20for%20a%20passwordless%20sign-in%20(presenting%20of%20the%20three%20numbers)%3F%3C%2FP%3E%3CP%3EI've%20enabled%20the%20passwordless%20signin%20for%20my%20tenant%20account.%20This%20is%20working%2C%20when%20signin%20from%20a%20foreign%20device%20when%20e.g.%20in%20home%20office.%3C%2FP%3E%3CP%3EWhen%20i'm%20inside%20my%20company%20and%20loging%20in%20from%20an%20incognito%20session%20inside%20my%20browser%20i'm%20still%20asked%20for%20my%20password.%3C%2FP%3E%3CP%3ECould%20this%20be%20a%20an%20error%20when%20using%20azure%20conditional%20access%20inside%20our%20company%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance.%3C%2FP%3E%3CP%3EPatrick%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-840309%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApp%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eauthenticator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Epasswordless%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-842061%22%20slang%3D%22en-US%22%3ERe%3A%20Authenticator%20App%20-%20passwordless%20-%20when%20prompted%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-842061%22%20slang%3D%22en-US%22%3EMy%20passwordless%20experience%20has%20been%20random.%20It%20used%20to%20work%20then%20it%20pretty%20much%20stopped.%20My%20personal%20Microsoft%20account%20usually%20works%20but%20from%20my%20azure%20joined%20Windows%20hello%20machine%20I%20still%20get%20password%20prompts%20and%20code%20instead%20of%20the%20three%20options.%20If%20the%203%20options%20did%20come%20up%20in%20the%20past%20I%20usually%20had%20to%20click%20this%20annoying%20send%20notification%20button%20to%20get%20to%20the%20login%20screen.%20%3CBR%20%2F%3E%3CBR%20%2F%3ENot%20sure%20if%20I%20need%20to%20setup%20again%20but%20I%E2%80%99m%20having%20similar%20pains.%20I%20kind%20of%20gave%20up%20on%20it%20for%20now.%20Been%20busy.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-842669%22%20slang%3D%22en-US%22%3ERe%3A%20Authenticator%20App%20-%20passwordless%20-%20when%20prompted%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-842669%22%20slang%3D%22en-US%22%3E%3CP%3EPasswordless%20is%20basically%20using%20a%20different%20auth%20flow%2C%20thus%20the%20%22known%20issues%22%20with%20AD%20FS%20and%20PTA.%20And%20the%20apps%20themselves%20need%20to%20be%20coded%20to%20recognize%20that%20flow%2C%20so%20experience%20will%20vary.%20It's%20a%20new%20feature%20still%2C%20they%20will%20polish%20it%20eventually.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-843322%22%20slang%3D%22en-US%22%3ERe%3A%20Authenticator%20App%20-%20passwordless%20-%20when%20prompted%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-843322%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F869%22%20target%3D%22_blank%22%3E%40Chris%20Webb%3C%2FA%3E%26nbsp%3BThank%20you%20for%20sharing%20your%20experiences.%20I've%20already%20set%20up%20passwordless%20again%2C%20but%20no%20improvement.%20A%20few%20months%20ago%20everyhting%20was%20working%20really%20good.%20Too%20bad.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BThank%20you%2C%20too.%20I%20hope%20so.%20(The'll%20have%20to%20polish%20things%20up.)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-863388%22%20slang%3D%22en-US%22%3ERe%3A%20Authenticator%20App%20-%20passwordless%20-%20when%20prompted%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-863388%22%20slang%3D%22en-US%22%3EI%20have%20a%20very%20similar%20experience.%20Sometimes%20it%20needs%203%20numbers%20sometimes%20it's%20only%20one%2C%20sometimes%20it%20needs%20my%20email%20and%20password%2C%20sometimes%20password%20only%2C%20sometimes%20it's%20a%20notification.%20It's%20very%20inconsistent%2C%20like%20many%20things%20in%20Microsoft.%20I%20have%204%20different%20admin%20centres%20for%20one%20office%20365%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2FHome%23%2Fhomepage%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2FHome%23%2Fhomepage%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsecurity.microsoft.com%2Fhomepage%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsecurity.microsoft.com%2Fhomepage%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fcompliance.microsoft.com%2Fhomepage%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcompliance.microsoft.com%2Fhomepage%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EDoes%20it%20make%20sense%3F%20Of%20course%20not.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-869720%22%20slang%3D%22en-US%22%3ERe%3A%20Authenticator%20App%20-%20passwordless%20-%20when%20prompted%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-869720%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F387901%22%20target%3D%22_blank%22%3E%40Opti-IT%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20Security%20%26amp%3B%20Compliance%20Admin%20UI%20is%20going%20to%20be%20split%20up%20into%20two.%20(1x%20Security%20%2F%201x%20Compliance).%3C%2FP%3E%3CP%3EI%20think%20the%202-in-1%20will%20be%20go%20away.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%2C%20of%20course%2C%20you're%20totally%20right.%20%3AD%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hi,

 

i'm asking myself when the MS Authenticator App should ask for a passwordless sign-in (presenting of the three numbers)?

I've enabled the passwordless signin for my tenant account. This is working, when signin from a foreign device when e.g. in home office.

When i'm inside my company and loging in from an incognito session inside my browser i'm still asked for my password.

Could this be a an error when using azure conditional access inside our company?

 

Thanks in advance.

Patrick :)

5 Replies
My passwordless experience has been random. It used to work then it pretty much stopped. My personal Microsoft account usually works but from my azure joined Windows hello machine I still get password prompts and code instead of the three options. If the 3 options did come up in the past I usually had to click this annoying send notification button to get to the login screen.

Not sure if I need to setup again but I’m having similar pains. I kind of gave up on it for now. Been busy.

Passwordless is basically using a different auth flow, thus the "known issues" with AD FS and PTA. And the apps themselves need to be coded to recognize that flow, so experience will vary. It's a new feature still, they will polish it eventually.

@Chris Webb Thank you for sharing your experiences. I've already set up passwordless again, but no improvement. A few months ago everyhting was working really good. Too bad.

 

@Vasil Michev Thank you, too. I hope so. (The'll have to polish things up.)

I have a very similar experience. Sometimes it needs 3 numbers sometimes it's only one, sometimes it needs my email and password, sometimes password only, sometimes it's a notification. It's very inconsistent, like many things in Microsoft. I have 4 different admin centres for one office 365:

https://admin.microsoft.com/AdminPortal/Home#/homepage

https://security.microsoft.com/homepage

https://compliance.microsoft.com/homepage

https://protection.office.com

Does it make sense? Of course not.

@Opti-IT 

 

The Security & Compliance Admin UI is going to be split up into two. (1x Security / 1x Compliance).

I think the 2-in-1 will be go away.

 

But, of course, you're totally right. :D

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies