Hacker News Reader

I assume a lot of this is org controlled and has toggles to allow or disallow certain things, because for our AD environment when they started recommending Windows Authenticator for MFA the first thing I did was test that it works if I just add it to Google Authenticator like my other MFA things, and it did, and I've been using it that way for about two years now I think.

View on HN

These things shouldn't be set by an organization. Microsoft needs to actually advocate for its users and stop creating options that make their products work shittier.

I disagree.

Many times, the org settings make a users life so much easier. We use MS SAML SSO for all our tools (office, Outlook Web, Atlassian toolstack, another ticketing tool) and I really only need to use the 2nd factor once in a few days or when I log out manually, and it's a simple sms code. Reading other comments here, my life is SO easy in this regard. I actually considera Microsoft single login with (sms) 2FA a good thing and therefore have almost 0 "mfa fatigue".

Reply on news.ycombinator.com