This is a good app for MFA. With either personal or work/school based Microsoft accounts the notification function makes it easy to securely sign in. It can also be used to secure accounts for other services that allow an authenticator app as a second factor.
Unfortunately, Microsoft recently decided to remove support for Apple Watch. This is a major reduction in convenience, and makes the app more of a pain to use. Now instead of 2 taps on my watch to allow a sign in, I have to dig out my phone, unlock the screen, select the notification, type in a 2 digit number, and then finally click the button to allow the sign in.
Ostensibly, this is because they added a number match requirement to reduce people clicking allow on notifications they didn’t recognize, but that doesn’t make sense. Number matching was already a thing, it just gave you 3 numbers to choose from instead of having to type the number in.
Even worse, the new number match functionality (the reason they removed Apple Watch support) is only for work or school accounts. The existing number match worked perfectly well for personal Microsoft accounts and with Apple Watch, but they made the choice to remove that functionality for personal accounts as well.
I understand that there’s always a trade off between convenience and security, but this time the loss of convenience is significantly greater than was necessary to achieve the security benefit added. The logical solution to notification fatigue issues would be to lock the account out for a period of time after multiple failed login attempts, as has been standard practice for decades. Why choose to reduce functionality and add friction to the sign on experience rather than simply recognizing multiple failed attempts as a problem and stopping subsequent notifications there?
I feel Microsoft products are created by engineers for accountants to use. They are safely the most pedantic and non intuitive as a good Rube Goldberg machine. In this instance I’m trying to re- add my outlook to my iPad and because it now has the stupid two phase interlacing of souls I must go through the authentication app. But when the authenticate app asks me to then type in the special secret decoder ring number before I can run into the next road block it secretly already created the next three by telling me to go to the authentication app (which I’m currently on) to get the number for the authentication app (which I’m currently on) to unlock the next phase of my Microsoft jail puzzle (which I can’t do because I’m being asked to get a number from an app that is asking me to get a number from itself). It’s maddening. Why does it have to be this difficult Microsoft? What secrets are going to be stolen from us here at this mom and pop faux blinds sales office?
Today, my Authenticator app broke on me and won’t let me sign into my office account to download a file that I need for work. It is making it very difficult for me to do my job, and I am relying on it to let me finish my tasks for today. Very frustrating piece of software and Microsoft has literally no tech support as their phone hangs up on you. Very irritating. If your organization has the option to use anything else, I would strongly recommend against using Microsoft products and services. I know that some places are so deeply ingrained in their products, which is unfortunate, but if you have the option, use some thing that is not going to lock your employees out with no way to fix it on their own (and with no customer support to help).
I recently reviewed this when they had just removed the Apple Watch app, and the only notifications that were coming through. When I authenticated with my work environment, the notification was that I needed to pick up my phone in order to authenticate, where previously I could do the authentication on the watch directly. Losing this functionality was intolerable from my standpoint. Fortunately, it looks like they restored this functionality, and I am now able to authenticate from my watch again without having to pick up my phone. Given that, I will put this back up to four stars. I would have called at five, but they still get dinged for doing that in the first place.
The removal of watch support causes significant disruption to all of my daily workflows. It took things from seamless to having to go grab my phone every few minutes for logins.
Unless this feature is intended to be restored, I have to petition our organization hard to avoid Microsoft Authenticator. All of the other authenticator apps we use support Apple Watch approvals.
Also, this is the only authenticator app we use where if you don’t approve within about 10 seconds of the notification popping up, the approval doesn’t go through. Imprivata doesn’t have this issue. Nor does Duo. This makes it even worse without the watch app to be able to approve instantly.
Been trying to figure out for days why the Authenticator app isn’t notifying me or giving me a passcode to sign me into my account for work. Today after several attempts to troubleshoot and try to find support but failed, I decided to uninstall and reinstall but after several turn off/turn on, try connected to Wi-Fi and not connected, the app simply will not download. There is no app support through Microsoft, Apple won’t let me report the problem as this isn’t a paid app so there is literally no way for me to get help and my job requires this dumb thing or I can’t get access to my work account! So writing here as maybe someone will look into the problem
Since moving to the “enter the number” (as opposed to just approve or “pick the number”) it been a fairly awful experience. The number box is tiny and half of the buttons are covered by the keyboard leading to a lot of mistaken “This was the me” selections. The Yes button is at the bottom, forcing you to scroll the list… and the only way yo scroll it is to use the other buttons to scroll it leading to a lot of “is it going to think I’m scrolling or clicking?”
Since moving to the “enter the number” (as opposed to just approve or “pick the number”) it been a fairly awful experience. The number box is tiny and half of the buttons are covered by the keyboard leading to a lot of mistaken “This was the me” selections. The Yes button is at the bottom, forcing you to scroll the list… and the only way yo scroll it is to use the other buttons to scroll it leading to a lot of “is it going to think I’m scrolling or clicking?”
The Authenticator app has been working flawlessly on my phone since I downloaded it over a year ago, I was on a trip for couple of days and wanted to login to my email account from another IP. I tried to open the app from to authorize my login, but the app close by itself immediately. I’ve restarted my phone several times and tried every other me methods I’ve seen online but none of them has worked so far. I’ll lose access to my account if I delete the app.
Another reflection of why Microsoft is viewed as outdated. Unfortunately my work uses the broken-window email and I was forced to download the “Authenticator” which doesn’t recognize my email address I’ve used for over 10 years. Good luck getting tech support within the 14 days I’m required by Microcrap to authenticate my email. No time for this. Also look out for the look alike apps trying to get your download. I didn’t see a warning from Microseeya.