iOS 2FA Edit Settings Continually Prompt When Password Changed

[jcd12]

I wanted to get an idea if others in the community are having these issues or if we're doing something incorrectly.  

2FA is successfully implemented and working on our iOS devices.  The issue comes with password changes and the iOS device prompting to "Edit Settings" for the native mail app.

After going through and updating your password, you get the 2FA prompt.  If you never return to the settings screen, the native mail profile doesn't update and you're continually prompted to "Edit Settings".

The only way the mail profile successfully updates is if you do the following:

1. Long press on the Microsoft Authenticator notification and approve the sign in.
2. Go into the Microsoft Authenticator, approve the login and return to the previous screen.
3. Use SMS to force the user to return to the settings screen and complete the profile update.

Most of our users utilize the Authenticator App and we receive lots of helpdesk tickets because they are not returning to the setup screen to finish updating the profile and then they are inundated with a continual prompt "Edit Settings".

The whole process seems a bit clunky and I would imagine it's more of an Apple issue, but I wanted to see if other are having this issue.

[#2]

I've seen this same behavior in two separate customer tenants. What appears to be happening is if the Authenticator Mobile App had *any* previous registration, then after a password change, the broker relationship is lost (Authenticator App is used as a Broker to register the device into Azure AD for conditional access purposes) and so I believe the prompting is caused by conditional access not being satisfied with device claim being met. You can work-around this issue by modifying conditional access to not look for a particular device type (iOS/android) but I feel like this is a bug and I recommend you open a support case with Microsoft.