Nevertheless I chose my Yubikey instead.

  • Aniki 🌱🌿@lemm.ee
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    11 months ago

    And? I don’t give a shit what the admins of my network want. It’s DFA – they don’t deserve to know that. Ergo, I don’t use the MS app. They can kiss my ass and fire me if they don’t trust where I am.

    • OfficerBribe@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      It’s a security / compliance policy. There is a very high chance your company has not even enabled it, have not seen anyone using it.

      As I see it, you would and could use it only if you force MS Authenticator notification as the only MFA method and it is important in which country MFA prompt originates. Usually it is IP based block / whitelist which checks IP from which login originates which seems like a much more useful info, then you can also allow any MFA method.

      You can always deny permissions to apps.

        • OfficerBribe@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          ·
          11 months ago

          Your question was why GPS permission is needed, you should now know why.

          I am using MS Authenticator and Aegis. Using MS authenticator only for work accounts that have been setup for number matching feature, it is pretty nice to simply enter 2 digits in app than entering 6 digits in client itself any time you need to approve MFA.

          Everything else that supports standard TOTP whether work related or personal is on Aegis - it is a much better TOTP app.