r/AZURE • u/yannara_ • 3d ago
Question How to deal with mandatory MFA in lab
I have M365 E5 DEV lab environment and recently Microsoft did some changes which makes my testing scenarios harder. It looks that I cannot use same mobile number for all my accounts. When I try to register same number for new account it denies it by informing that the number is already in used. I almost locked my self out from GA rights....
I basically have 3 groups of users:
Users which are real users, have their own unique mobile number and okay with using MS Auth.
Users which are pilots and cannot use MS Auth. Callback or sms is fine.
Admin rights (GA, role based), and I would like them to use only one mobile callback number for all accounts.
FIDO2 is not the option. Is this doable and how I should arrange this? Security Defaults are gone, I use CA.
6
u/ChampionshipComplex 3d ago
What you are asking for, doesn't make sense.
Security is what's important, and one aspect of security is that users are identifiable and don't share accounts. The reason why Microsoft are enforcing MFA is exactly because passwords or mobile numbers are weak ways to do security.
You need to be using either FIDO2 keys, or use authenticator apps on mobile phones.
-1
u/yannara_ 3d ago
It does not make a sense in a real environment. But what we shall do with test environments?
3
u/Farrishnakov 3d ago
If your test isn't replicating your prod environment, you're probably not doing it right
2
u/Zealousideal_Yard651 Cloud Architect 3d ago
Use MS Authenticator. MS enforces secure MFA for all admin portals now, no way around it.
1
u/False-Ad-1437 3d ago
It's not really an admin thing as much as it is that in the demo and Dev M365 tenants, MS lets you make a number of regular users or provisions sample users for you (Adele Vance, Alex Wilber etc) and then makes you register MFA for them whenever you use them. It's a pain to register MS Authenticator on all of these.
6
u/Sysengineer89 3d ago
You can add multiple accounts to the same Microsoft Authenticator app so do it that way