MFA /批准登录请求/不要再问14天失踪 [英] MFA/Approve Sign In Request/Don't ask again for 14 days missing

查看:173
本文介绍了MFA /批准登录请求/不要再问14天失踪的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

大家好,我们组织中的一些用户报告说,在"批准登录请求"MFA屏幕上,他们不再看到"请勿再询问14天"。选项,并且每次使用
Azure应用程序时都必须进行第二次因素批准。

Hi all, a couple of users in our organization have reported that on the 'Approve sign in request' MFA screen, that they no longer see the "Don't ask again for 14 days" option anymore and have to do the 2nd factor approval every time they use an Azure app.

在MFA服务设置中,一切看起来都是'记住多因素身份验证'设置。它设定为14天。

Everything looks right in the MFA service settings as far as the 'remember multi-factor authentication' setting. It's set for 14 days.

之前是否有人见过这个并知道可能的解决方案?

Has anyone seen this before and know a possible resolution?

提前感谢您提供反馈。

推荐答案

你好zBushman,

Hi zBushman,

当用户选择"Don"时在登录时再次询问X天选项"记住多因素身份验证功能在浏览器上设置持久性cookie。在Cookie过期的
之前,不会再次提示用户使用同一浏览器进行多重身份验证。如果用户在同一设备上打开其他浏览器或清除其Cookie,则会再次提示他们进行验证。

非浏览器上不显示"不再询问X天"选项应用程序,无论应用程序是否支持现代身份验证。

默认设置为14天,允许可信设备绕过两步验证。



有关详细信息,请查看以下文档以设置MFA。

When user selects "Don't ask again for X days option at sign-in" the remember Multi-Factor Authentication feature sets a persistent cookie on the browser. The user isn't prompted again for Multi-Factor Authentication from that same browser until the cookie expires. If the user opens a different browser on the same device or clears their cookies, they're prompted again to verify.
The Don't ask again for X days option isn't shown on non-browser applications, regardless of whether the app supports modern authentication.
By default 14 days are set to allow trusted devices to bypass two-step verification.

For more information, please check the below documentation for setting MFA.

Azure AD记住MFA

我希望这会有所帮助。





这篇关于MFA /批准登录请求/不要再问14天失踪的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆