Unanswered

Multifactor Authentication / Authenticator App and PowerApp - Unable to work together

(0) Share

Report

Posted on by PM

I noticed a few posts related to this - but was unable to find a concrete solution for it - hence asking the question:-

We have a unique scenario in the org:- few users who are on MFA and use MS Authenticator are going into an endless loop when trying to access the published app. Below are the scenarios we noticed:-

Any user using a personal device (phone), not having Authenticator installed on it - can install PowerApp and from that login to it ( using their Office Credentials) and access the App published to them.
Users who have Authenticator on their device
- Login to PowerApp ( Authenticator kicks in during this process)
- List of app shows up
- User click on the app - and they are asked to login again - which then throws up an error
Users who have authenticator on their device
- Login to PowerApp ( Authenticator kicks in during this process)
- List of app shows up
- User click on the app - and they are provided an option to select an Account ( from authenticator list of managed accounts)
- Post this they are able to access the app

For users in Group 2, we got them to remove Authenticator from their machine ( or log off Authenticator) - and then they were able to access PowerApp without any issues. They reinstalled Authenticator and were still able to access PowerApp without issues ( no longer was authenticator kicking in when the click on the App).

The behavior seems spotty and does not inspire confidence when we are planning to roll out the app to the entire org.

Categories:

Governance & administering

I have the same question (0)

All responses (4)

Answers (0)

v-yutliu-msft on at

Like (0)

Report

Hi @PM ,

Do you mean that the action of MS Authenticator not works good?

It relates to many reasons:

1)network situation

2)browser's cache

3)browser's version

4)account situation

etc...

Since I could not use the exact same environment as yours, I could not find the detailed reasons.

I suggest you open a ticket here:

https://powerapps.microsoft.com/en-us/support/pro/ticket/

Best regards,

Was this reply helpful? Yes No
Joel CustomerEffective 3,224 on at

Like (0)

Report

from my experience, this can happen if people are switching between different o365 logins (not just with Power Apps, also if they are loging in for mail, sharepoint, etc using different credentials). Sometimes browsers get confused.

My recommendation for the people with issues, assuming you are using IOS, go to settings-->safari and clear the browser cache. IF it still has trouble, reinstall authenticator.

behind the scenes Power apps is using Safari on IOS and Chrome on Android, so resetting/clearing these browsers frequently resolves this type of issue.

Was this reply helpful? Yes No
PM 40 on at

Like (0)

Report

This is the message users are getting - those who have authenticator on. To reiterate - authenticator does let the login to PowerApp ( using their saved credentials), but when the select a published app within the PowerApp client - they get routed to login page - which then errors out as below.

Snip.png

Was this reply helpful? Yes No
PM 40 on at

Like (0)

Report
Does anyone have any insights - few more details :-
We have using powershell/cmdlets - disabled the popup from showing up
Users who have authenticator/mfa - are still getting a pop up to enroll device and then getting the screenshot I placed in my previous post
All other users are able to get through without the popup.
The app uses Sharepoint Online as data source - which is restricted through Conditional Access.

Which takes precedence - the pop-up by pass or the Conditional Access kicking in before that.

Was this reply helpful? Yes No