Sep 05 2019
- last edited on
Jul 27 2020
i'm asking myself when the MS Authenticator App should ask for a passwordless sign-in (presenting of the three numbers)?
I've enabled the passwordless signin for my tenant account. This is working, when signin from a foreign device when e.g. in home office.
When i'm inside my company and loging in from an incognito session inside my browser i'm still asked for my password.
Could this be a an error when using azure conditional access inside our company?
Thanks in advance.
Sep 06 2019 08:16 PM
Sep 07 2019 11:03 PM
Passwordless is basically using a different auth flow, thus the "known issues" with AD FS and PTA. And the apps themselves need to be coded to recognize that flow, so experience will vary. It's a new feature still, they will polish it eventually.
Sep 08 2019 11:59 PM
Sep 19 2019 08:01 AM
Sep 22 2019 11:00 PM
The Security & Compliance Admin UI is going to be split up into two. (1x Security / 1x Compliance).
I think the 2-in-1 will be go away.
But, of course, you're totally right. :D
Feb 10 2021 10:38 AM
@PatrickF11 did you manage to solve this? I am doing a pilot with two users and having different experiences.
One is a existing user with their mobile phone already enrolled to intune and that is setup for combined registration and as the authentication app. When he log´s in it ask´s for the password and then the notification with 3 number to choose from.
The other is a new user, that enrolled the device to intune, installed the authentication app, the MFA as activated (not the combined experience). When this user connects it immediately gets a notification in the app to authenticate by select one number.
Feb 10 2021 11:38 PM
@Ricardo Mendes unfortunatelly not.
A few month everything was working as expecrted, then there were a few month where my account didn't do passwordless at all. Nowadays it is working.... how should is say... "sometimes"...
Feb 11 2021 11:16 PM
Feb 14 2021 04:07 AM
Feb 14 2021 07:06 AM
Feb 17 2021 07:27 AM
Feb 17 2021 07:33 AM
@PatrickF11 from my side, the customer is now seeing the expected behavior. Speaking with Microsoft and since it is in preview the failures are expected. But the feature works fine. So now we will wait for the GA and then implement.
Mar 30 2021 02:41 AM
May 20 2021 01:15 PM
Jun 10 2021 03:12 AM
@imorton777 one possible solution could be this hint:
The passwordless authentication promt (three digit choice) only appears automatically, if your last sign-in was used by this method. If you're being prompted to use your password try to click on "other ways to sign-in", then choose app request.
After you've successfully signed in, try to log out or open up a new incognito session and sign in again.
Then you should be faced with the passwordless method. :)
This was a pain in the **bleep** for me until i got this understanding.