Third Party IDP and MFA

slvandewalle_gb — Thu, 25 Jul 2024 20:47:52 GMT

Hey all,

We setup Microsoft as our IDP on Chromebooks at the end of last year. One thing that we didn't expect was that a user that has an MFA requirement in Microsoft seems to have to MFA at every login to a Chromebook. This makes sense in a way because if the MFA token is stored in the profile of the Chromebook it is encrypted until there is a successful login. Meaning that the token will remain encrypted until after you have signed in and gone though MFA.

Is anyone else experiencing MFA at each login to the Chromebook?

Has anyone found a way around that?

Thanks!

Re: Third Party IDP and MFA

kaned — Fri, 26 Jul 2024 13:39:13 GMT

We set up IDP with a different vendor (Class link). We also have the same issue.

Yes, this is the expected behaviour. I believe the only way to get around that (years ago) was to change the login screen from "Do not remember previous users" to "Remember previous users" or something like that.

See if this setting helps: DeviceShowUserNamesOnSignin

I believe this was the answer years ago.

topic Re: Third Party IDP and MFA in Peer-Peer Topics

Third Party IDP and MFA

Re: Third Party IDP and MFA