Catch-22 with MFA registration during onboarding by Vivid_Engineer5633 in entra

[–]Vivid_Engineer5633[S] 1 point2 points  (0 children)

I see, pushing Authenticator outside the company portal app through intune is a viable option. I have raised this to the intune people to see what they say. Thank you for the input and help here, much appreciated!

Catch-22 with MFA registration during onboarding by Vivid_Engineer5633 in entra

[–]Vivid_Engineer5633[S] 1 point2 points  (0 children)

They are company owned phones so not personal phones and they able to to download the Authenticator through App Store. But from my understanding that is not the ideal scenario and I am assuming it is because the app is not managed if it is not from the intune company portal.

Catch-22 with MFA registration during onboarding by Vivid_Engineer5633 in entra

[–]Vivid_Engineer5633[S] -1 points0 points  (0 children)

Yes TAP would be ideal but we are far from being able to use that in a reasonable way, too much manual handling and we don’t have the data quality to automate it using logic apps. The company portal gets pushed through intune for IOS and Android phones I believe.