SSO是否击败/超越了MFA挑战 [英] does SSO defeats / overrides MFA challenge

问题描述

我有一台azureAD加入计算机，我为所有用户配置了MFA，但最近我看到我没有得到MFA提示.我查看登录日志，然后从我了解的MFA信息中看到此信息令牌中的权利要求满足了MFA要求" 为我做了.这导致了我的问题

i have an azureAD join machine, i configured MFA for all my users but lately i see i dont get the mfa prompt. i check the sign in logs and i see this information "MFA requirement satisfied by claims in the token", from what i understand MFA is been done for me. which leads to my question

1. SSO会否决MFA挑战，因为如果我无法使用属于我的设备获得mfa提示，这会打败需要个人设备挑战的MFA整个过程.

1. does SSO overrides the MFA challenge, because if i am unable to get an mfa prompt with a device that belongs to me that defeats the whole process of MFA which requires a challenge from a personal device.

i等待您的及时响应.

i Await your prompt response .

推荐答案

这里已经有一个关于该行为的旧线程:

there is already an older thread here about that behavior:

请参阅Sander Berkouwer的答案.

See answer from Sander Berkouwer.

因此，通常具有多种因素，并非每次都需要提示，我假设您正在使用Windows Hello(例如PIN)登录到您的设备，或类似的东西?

So in general having a multi-factor, does not every time require a prompt, I assume you are using Windows Hello (ex. PIN) to logon to your device, or something similar ?

因此，在这种情况下，具有第二个因素的PIN的设备.

So in that case the device with the PIN in the 2nd factor.

/Peter

这篇关于SSO是否击败/超越了MFA挑战的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！