Support tickets unresolved after 11 months; escalation requests ignored; stuck in a feedback loop
Hello, We have been unable to update O365 applications for close to a year now. When we update the applications, our end-users are unable to authenticate and receive 1001 errors. We have had a support ticket open now for 11 months. We are stuck in a loop where support asks us to demonstrate the issue. I can consistently reproduce this issue. This is a cry for help. Thanks to anyone who has any suggestions.
How to add Passkey for Entra ID / M365 Identity to Windows Hello or third-party password manager?
I manage many M365 tenants and can't add all of them to Windows as an account. Because of this I would like to add passkeys for those accounts to either a third-party password manager or (preferred) Windows Hello. So far I haven't found a way to do this. The passkey dialog at https://mysignins.microsoft.com/security-info only allows me to add a passkey to a physical key. So: So how can I add M365 passkeys to Windows Hello?
User getting refresh token expired due to inactivity in Outlook desktop AADSTS70008
I have a user who continues to receive this AADSTS70008 error in Outlook Desktop. This computer has been in service for several years and Outlook desktop has been running fine. User can successfully authenticate in MS Teams and Outlook on the Web. MFA is enabled. I have attempted a restart but Outlook produces the same error. I have seen older posts suggesting that the registry key for the office activation be removed to fix this issue. Any thoughts on a more straightforward fix than registry hacks? DSTS70008'Identity Pass' Unable to request new 'TAP code' returns Error Code: 203 Information does not match
Issue: BLOCKED: Disaster Recovery Fails: Unable to request new 'TAP code' from 'Identity Pass' app. Resetting Authenticator App on replacement Corp Laptop & Android Repo steps: - Received new MSFT imaged Laptop & Android phone - On Android, go to aka.ms/knockknock - 'Identity Pass' launches successfully and requests Employee ID & Corp email - Enter Employee ID '000477476' & Corp Alias 'email address removed for privacy reasons' - Click 'Submit' - Returns Error Code: 203 'Information does not match'. - Retry with Birthdate 9/22/1977 & Corp Alias 'email address removed for privacy reasons' - Click 'Submit' - Returns Error Code: 203 'Information does not match'. - BLOCKED: Resubmitting a new 'TAP code' request Fails with Error Code: 203 'Information does not match'. As the result, we can no longer sign-in to https://client.wvd.microsoft.com/arm/webclient/index.html to configure our Authenticator Apps. Please let us know if there's anything else we can do or provide the help get this issue resolved ASAP. Thanks & Best Regards, GaryThe ability to add photos / images to Microsoft Authenticator accounts
Hi, First post in this forum (hello to all !). Can we have the ability to add photos / images to each account listed on our Microsoft Authenticator accounts ? This would allow me to quickly identify which account code I need on the long list of accounts I have connected to my Authenticator app. Many thanks JayMake software oath mandatory in addition to other MFA methods
Hi, We're seeing quite a few issues with users who bought a new phone, and subsequently are locked out of their account due to MS Authenticator not properly porting their information to their new device. I've been trying to promote using software oath (in our case configure MFA using 1Password) to prevent such lockouts and reduce the number of support tickets , but with limited success so far. Is there a way to not just make MFA in general mandatory, but also specify that software 2FA app needs to be one of them (in addition to e.g. MS Authenticator)? Thank you!
Exclude Microsoft first party applications in Azure conditional access policy
We have app built on Microsoft Graph resource and we have a conditional access policy that targets all cloud apps. when users sign into this app using Chrome browser on iOS they get error and prompt to use Edge. We do not want users to change the browser and tried to exclude Microsoft Graph from CA policy using all options including API but fails with the below error. Policy contains invalid applications: unsupported firstpartyapplication. Is there a way to exclude Microsoft Graph from the policy?
Password-less authentication with using One-time passcode from Microsoft Authenticator App.
Recently one of my users was in Internet restricted zone and when he tried to sign-in with Password less method, He didn't get the code due to no internet in mobile and in addition to this, he forgot the user sign-in password. Is there any method or way to setup that we can be able to sign-in with using the 6-digit Microsoft Authenticator App Code instead of the push notification and password.
