MFA prompt frequently

%3CLINGO-SUB%20id%3D%22lingo-sub-2165132%22%20slang%3D%22en-US%22%3EMFA%20prompt%20frequently%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2165132%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20user%20that%20i%20saying%20he%20is%20getting%20promted%20for%20MFA%20login%20several%20times%20a%20day%20when%20logging%20into%20Office%20%2FAzure%20related%20resources.%20When%20i%20did%20an%20audit%20for%20him%20on%20MFA%20logins%20i%20saw%20that%20for%26nbsp%3B2021-02-24%20he%20was%20asked%20for%20MFA%2015%20times%20that%20day%20and%20about%20the%20same%20the%20days%20before.%20He%20was%20logging%20into%20for%20example%20Visual%20Studio%2C%26nbsp%3BMicrosoft%20Graph%2C%26nbsp%3BOffice365%20Shell%2C%26nbsp%3BOffice%20365%20Exchange%20Online.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20a%20normal%20amount%20of%20requests%20each%20day%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2165132%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMFA%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMulti-Factor%20Authentication%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2165276%22%20slang%3D%22en-US%22%3ERe%3A%20MFA%20prompt%20frequently%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2165276%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F859864%22%20target%3D%22_blank%22%3E%40michaelsjodin%3C%2FA%3E%26nbsp%3BHello%2C%20to%20get%20prompted%20that%20many%20times%20doesn't%20sound%20correct.%20How%20are%20your%20MFA%20settings%20set%20up%3F%20CA%3F%20Require%20MFA%20etc.%20Is%20it%20only%20happening%20for%20this%20one%20user%3F%20Has%20it%20just%20started%20being%20OK%20previously%3F%20You%20can%20go%20to%20the%20user%20account%20in%20Azure%20-%20Users-%20Sign-ins%20and%20see%20more%20details%20to%20get%20a%20hint%20of%20what's%20going%20on.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20could%20try%20to%20revoke%20the%20remembered%20MFA%20sessions%20to%20see%20if%20it%20makes%20any%20difference%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-mfa-userdevicesettings%23manage-user-authentication-options%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EManage%20authentication%20methods%20for%20Azure%20AD%20Multi-Factor%20Authentication%20-%20Azure%20Active%20Directory%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERecommended%20settings%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcepts-azure-multi-factor-authentication-prompts-session-lifetime%23recommended-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20AD%20Multi-Factor%20Authentication%20prompts%20and%20session%20lifetime%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hello

 

I have a user that i saying he is getting promted for MFA login several times a day when logging into Office /Azure related resources. When i did an audit for him on MFA logins i saw that for 2021-02-24 he was asked for MFA 15 times that day and about the same the days before. He was logging into for example Visual Studio, Microsoft Graph, Office365 Shell, Office 365 Exchange Online and each one asked him for MFA several times.

 

The user used the same computer all the time and did not changed IP or anything like that.

 

Is this a normal amount of requests each day ?

2 Replies

@michaelsjodin Hello, to get prompted that many times doesn't sound correct. How are your MFA settings set up? CA? Require MFA etc. Is it only happening for this one user? Has it just started being OK previously? You can go to the user account in Azure - Users- Sign-ins and see more details to get a hint of what's going on.

 

You could try to revoke the remembered MFA sessions to see if it makes any difference

Manage authentication methods for Azure AD Multi-Factor Authentication - Azure Active Directory | Mi...

 

Recommended settings

Azure AD Multi-Factor Authentication prompts and session lifetime | Microsoft Docs

+1
Since midnof this week I also received many back to back !