MFA denied; duplicate authentication attempt

Copper Contributor

We see a lot of entries in the Entra ID Sign in logs with "MFA denied; duplicate authentication attempt". Most of the time a lot of them are registered in a short amount of time

 

 

Users are not (yet) complaining. May be users don't even see something wrong.

Anyone who knows what this means? (MFA denied; duplicate authentication attempt)


kind regards

Jurgen

2 Replies
Thank you for your suggestion, however the entries in the sign in logs are for active users on an active device. I cannot find a relation to stale devices.