{"id":17622,"date":"2023-04-27T12:47:27","date_gmt":"2023-04-27T16:47:27","guid":{"rendered":"https:\/\/www.marshall.edu\/it\/?p=17622"},"modified":"2023-11-20T11:19:31","modified_gmt":"2023-11-20T16:19:31","slug":"new-microsoft-authenticator-app-notification-features-enabled-may-1st","status":"publish","type":"post","link":"https:\/\/www.marshall.edu\/it\/2023\/04\/27\/new-microsoft-authenticator-app-notification-features-enabled-may-1st\/","title":{"rendered":"New Microsoft Authenticator App Notification Features Enabled May 1st"},"content":{"rendered":"

Microsoft announced for May 2023, the default notification method for Microsoft Authenticator App will change from a push Approve\/Decline model to a number matching model. Designed to reduce bad actor MFA fatigue attacks on end users, the number matching system cannot be abused like its predecessor. \u00a0On\u00a0Monday, May 1st, 2023,<\/strong>\u00a0Marshall University Information Technology will push this update to our users.<\/p>\n

WHAT SHOULD I EXPECT?<\/strong><\/p>\n

The new MFA prompt will look as such. When attempting logon to a MFA protected resource, the user will be presented with a number on the screen (Figure I), the MFA notification is where the user will enter the number (Figure II). Please note it displays the username, which application is being used, and general location. With this information a user should easily be able to tell if the MFA prompt is legitimate or malicious. Keep in mind the location can vary greatly if using your cell phone to log into a MFA protected resource.<\/p>\n

 <\/p>\n

Figure I<\/strong><\/p>\n

\"\"<\/p>\n

Figure II<\/strong><\/p>\n

\"\"<\/p>\n

Please note:<\/strong><\/p>\n