azure federated managed apple id verification prompt frequently

%3CLINGO-SUB%20id%3D%22lingo-sub-2105687%22%20slang%3D%22en-US%22%3Eazure%20federated%20managed%20apple%20id%20verification%20prompt%20frequently%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2105687%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202021-01-28%20192040.png%22%20style%3D%22width%3A%20184px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F250235i9ABF5EEED8F3FEAB%2Fimage-dimensions%2F184x232%3Fv%3D1.0%22%20width%3D%22184%22%20height%3D%22232%22%20role%3D%22button%22%20title%3D%22Screenshot%202021-01-28%20192040.png%22%20alt%3D%22Screenshot%202021-01-28%20192040.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20am%20using%20azure%20federated%20managed%20apple%20id%20to%20sign%20in%20icloud.%20once%20every%20few%20days%2C%20i%20will%20get%20apple%20id%20verification%20prompt%20to%20authenticate.%20is%20this%20normal%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2105687%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2110928%22%20slang%3D%22en-US%22%3ERE%3A%20azure%20federated%20managed%20apple%20id%20verification%20prompt%20frequently%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2110928%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F420766%22%20target%3D%22_blank%22%3E%40jrng89%3C%2FA%3E%2C%20good%20morning.%20Federated%20authentication%20requires%20that%20a%20user%E2%80%99s%20User%20Principal%20Name%20(UPN)%20match%20their%20email%20address.%20User%20Principal%20Name%20aliases%20and%20Alternate%20IDs%20are%20not%20supported.%20To%20use%20federated%20authentication%20with%20Apple%20School%20Manager%2C%20your%20Apple%20devices%20must%20meet%20the%20following%20requirements%3A%20iOS%2011.3%20or%20later%20iPadOS%2013.1%20or%20later%20macOS%2010.13.4%20or%20later.%20Check%20your%20federation%20services%20logs%20and%20see%20where%20is%20the%20problem%20it%20should%20be%20my%20first%20option.%20Here%20you%20have%20more%20info%20about%20Federation%20services%20with%20Apple%20ids.%20%3CA%20href%3D%22https%3A%2F%2Fsupport.apple.com%2Fen-ie%2Fguide%2Fapple-school-manager%2Fapdb19317543%2Fweb%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.apple.com%2Fen-ie%2Fguide%2Fapple-school-manager%2Fapdb19317543%2Fweb%3C%2FA%3E%20I%20hope%20this%20can%20help.%20Good%20luck!%3C%2FLINGO-BODY%3E
Occasional Contributor

Screenshot 2021-01-28 192040.png

 

i am using azure federated managed apple id to sign in icloud. once every few days, i will get apple id verification prompt to authenticate. is this normal? 

5 Replies
Hi @jrng89, good morning. Federated authentication requires that a user’s User Principal Name (UPN) match their email address. User Principal Name aliases and Alternate IDs are not supported. To use federated authentication with Apple School Manager, your Apple devices must meet the following requirements: iOS 11.3 or later iPadOS 13.1 or later macOS 10.13.4 or later. Check your federation services logs and see where is the problem it should be my first option. Here you have more info about Federation services with Apple ids. https://support.apple.com/en-ie/guide/apple-school-manager/apdb19317543/web I hope this can help. Good luck!

@Pablomcse 

thanks. i have no problem signing in to federated azure work account.

 

it is just that the verification prompt will happen every few days 

Hi @jrng89 , good evening. 

 

Maybe your Azure AD MFA  "remember multi-factor authentication settings" is Disabled. 

 

You can see this here:

  1. In the Azure AD portal, search for and select Azure Active Directory.
  2. Select Security, then MFA.
  3. Under Configure, select Additional cloud-based MFA settings.
  4. In the Multi-factor authentication service settings page, scroll to remember multi-factor authentication settings.

 

You can find more info here: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concepts-azure-multi-factor-a...

 

I hope this can help you. 

 

Good luck!

Hey!! Did you find a fix, i have exactly the same issue while using federated authentication. 

@jrng89 

 

Hi!! have you found a fix for this, we are getting the same issue?