Using Expensify mobile app (iOS/Andoid) if SSO via Azure Active Directory with MFA enabled
What happens if users gain access to Expensify Online using SSO with Azure Active Directory (AAD) but AAD is setup to use multifactor authentication? How does the user then sign into the iOS / Android app? Does it support MFA?
Would he then need to create and use an Application Password created within AAD that bypasses the MFA?
Answers
-
Sheena Trepanier Expensify Team, Approved! Accountant, Expensify Student Ambassador Posts: 1,362 Expensify TeamOptionsHello @Georg_B, welcome! I don't have the answer for you right now, but I've already brought it to my team so I can get you a definitive answer. Once I've confirmed the information I'll update you on this thread.
I'll be in touch soon!
-
Hy Georg_B,
Azure MFA helps safeguard access to data and applications while meeting user demand for a simple sign-in process. It delivers strong authentication via a range of easy verification options—phone call, text message, or mobile app notification—allowing users to choose the method they prefer, however today we will setup the phone call method. It also helps protect your business with security monitoring and machine learning-based reports that identify inconsistent log-in patterns. Real-time alerts notify your IT department of suspicious account credentials, to help mitigate potential threats.
Here is the step by step process of Enable Multi-Factor Authentication in Azure go through the link given below! https://blogs.technet.microsoft.com/canitpro/2014/08/14/step-by-step-enable-multi-factor-authentication-in-azure/ | Microsoft Azure
Hope This Helps You!
Best Regards!
SaraJohn -
Hy Georg_B,
Azure MFA helps safeguard access to data and applications while meeting user demand for a simple sign-in process. It delivers strong authentication via a range of easy verification options—phone call, text message, or mobile app notification—allowing users to choose the method they prefer, however today we will setup the phone call method. It also helps protect your business with security monitoring and machine learning-based reports that identify inconsistent log-in patterns. Real-time alerts notify your IT department of suspicious account credentials, to help mitigate potential threats.
Here is the step by step process of Enable Multi-Factor Authentication in Azure go through the link given below! https://blogs.technet.microsoft.com/canitpro/2014/08/14/step-by-step-enable-multi-factor-authentication-in-azure/ | Microsoft Azure
I hope this will helps you!
Best Regards!
Sarahjohn -
We would like this too. @Georg_B and @sarahjohns388 have both detailed the security reasons why this is important. Hoping Expensify is listening to its customers to help make our account secure. Thank you, Jon
