Unanswered

Website requires authenticator MFA

(0) Share

Report

Posted on by lkhall_37203

Working on a bot that requires logging into a website that requires Authenticator MFA and I have been trying to think of all the possible ways I might be able to run this in unattended mode and right now I can't figure out how to get around the MFA. Wanted to see if anyone else has ran into a similar issue and how you handled it. Any input or guidance would be greatly appreciated.

Categories:

Power Automate Desktop

I have the same question (0)

All responses (5)

Answers (0)

lbendlin 8,479 Super User 2025 Season 2 on at

Like (0)

Report

Any input or guidance? As you can probably appreciate MFA was put into place exactly to prevent activities like yours from being successful.

How is this MFA implemented? using a verification text sent to a phone? If you own that phone number you could write an app on your phone that would automatically answer the text, or forward it to an email that you could then pick up etc.

Talk to the website owners and ask if they have an API that does not require MFA.

Was this reply helpful? Yes No
lkhall_37203 72 on at

Like (0)

Report

Understood and if the authentication was a text or email that would certainly make things easier however this website required Microsoft Authenticator to be used. I will double check on the API but I doubt they have one that exists for my use case.

I am trying to reengineer an automation bot that was built by another company and I know they were able to figure out a way to resolve the MFA and reCAPTCHA requirements on this website just trying to figure out how they did it.

Haven't even started to solve the reCAPTCHA requirements that happen after MFA has been successful.

Was this reply helpful? Yes No
Agnius Bartninkas Most Valuable Professional on at

Like (0)

Report

Well, if you have the code created by the other company, you might as well check how they did it. But if it's a MS Authenticator app, it's not something that can be done unattended. It essentially just means that the user who had the app set up on their phone was likely completing the challenge on their phone when needed and then the flow would continue. This is a possible solution, if the flow is not intended to run at night or weekends or other times when the user may not be available.

An API is always a better solution. Especially on web pages that have stuff in place to prevent UI automation. And MFA + reCAPTCHA are there exactly for that reason.

-------------------------------------------------------------------------
If I have answered your question, please mark it as the preferred solution. If you like my response, please give it a Thumbs Up.

I also provide paid consultancy and development services using Power Automate. If you're interested, DM me and we can discuss it.

Was this reply helpful? Yes No
lkhall_37203 72 on at

Like (0)

Report

Unfortunately, I don't have access to their code we are trying to replace their solution with an in house developed one. They very well could be running the process attended and completing the challenges manually. The second option in this case of using an API is not viable either as the web site provider doesn't have any public facing API's. I have seen some videos online of people solving the reCAPTCHA challenge that I will have to explore further to see how they solved it. In the meantime probably just going to have to run this in attended mode and go through the challenge manually.

Was this reply helpful? Yes No
Agnius Bartninkas Most Valuable Professional on at

Like (0)

Report

I know of solutions that can solve a reCAPTCHA via an API request that is being sent to a 3rd party tool (possibly paid) that does it and then returns a response. But the MFA part will anyhow need to be attended to a point. At least to an extent where the flow might actually run unattended, but the user will still need to be notified of an MFA challenge and will need to complete it before the flow continues.

-------------------------------------------------------------------------
If I have answered your question, please mark it as the preferred solution. If you like my response, please give it a Thumbs Up.

I also provide paid consultancy and development services using Power Automate. If you're interested, DM me and we can discuss it.

Was this reply helpful? Yes No