curious how others handled teh move away from authenticator app codes at a place like a law office... who got hardware keys, who stayed on app-based approvals, and how did u handle lost devices?
Im also curious about what happens when someone loses their phone or key on a Friday evening. How do you handle recovery without creating a backdoor that attackers could abuse?
oh ive been there lol number matching plus showing app and location in the push prompt dramatically reduces blind approvals... most major identity providers support it; enable it before considering anything more expensive. worked for me anyway 馃し
hmmmm not sure about that hardware keys get lost constantly in some environments. App-based number matching may be teh better default for a 50-person company. just my 2 cents
help!! my office machine is officially haunted im about to throw this thing out the window lol
@rubeno331 holy cow decided to keep app-based MFA with number matcihng for most users and add conditional access. Thanks for the realistic take.
Sign in or create an account to reply.
