Post #4061819
2026-07-24 11:42 UTC
@DaveMWilburn@infosec.exchange @Viss@mastodon.social Thank you, Dave. Good advice!
This org is a Microslop shop so we have Authenticator which presumably backs up to the cloud. And I’m afraid YubiKeys are a bridge too far (except for the Admins).
The users I’m dealing with can’t handle re-entering a password to access email on their phones. Very challenging.
Replies (1)
-
@DaveMWilburn@infosec.exchange 2026-07-24 11:56
@scottwilson@infosec.exchange @Viss@mastodon.social IIRC, MS Authenticator has a few gotchas. I'm under the impression it won't work on rooted/jailbroken phones, which could be an issue for users if you're a BYOD shop where the users might have a reasonable expectation of being able to do whatever they want with the phones that they own. Maybe that's a "feature" for your environment. I also vaguely recall that its backup mechanism on iOS assumes iCloud, which may or may not be compatible with your corporate policies.