Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
If all you're using is a browser, sure.
Not just browser, also applications or shells etc. That was just an example. But even with Microsoft Modern authentication when you are on a command line it will open up the browser to get the authentication confirm in most cases. As I'm sure you actually know.
 
The more I use my Watch, the more I use it as a watch and the less apps I load onto it. I just don't see any need for apps on here beyond basic messages, or health related.
 
There are other password managers, and yes it is best practice as part of an ISMS to use that in any organisation.

PS. 1Password has shell support, easy to use on sh, bash, zsh and powershell 👍
No government organization allows the use of a password manager, period. Shell support is not going to work in this scenario.
 
  • Disagree
Reactions: cyb3rdud3
Not just browser, also applications or shells etc. That was just an example. But even with Microsoft Modern authentication when you are on a command line it will open up the browser to get the authentication confirm in most cases. As I'm sure you actually know.
Again, this doesn't help with jump boxes. It might seem like I'm nitpicking but I'm describing the workflow of literally millions of cloud infrastructure engineers.
 
I don't think you have described the notifications correctly. In my experience, notifications always show up on the my phone. If you are actively using the phone, they only show up on the phone. If you are not using the phone, they also show up on the watch. Makes sense to me.
That's the way it works for me too.
 
  • Like
Reactions: BaldiMac
No government organization allows the use of a password manager, period. Shell support is not going to work in this scenario.
Not sure where in the world you are but in the USA the GSA, CISA and NIST begs to differ, in the UK the NCSC begs to differ, in the EU ENISA/CSIRT begs to differ. You couldn't possibly create secure, unique passwords if you don't. I'm sorry but I'm calling bull ****.
 
Again, this doesn't help with jump boxes. It might seem like I'm nitpicking but I'm describing the workflow of literally millions of cloud infrastructure engineers.
It does, it really does. But considering the untruths about the use of password managers for government I think the more likely explanation is that you just don't know how it can work. That is fine but don't mix up not knowing with that it can't be done.
 
The more I use my Watch, the more I use it as a watch and the less apps I load onto it. I just don't see any need for apps on here beyond basic messages, or health related.
I use my Watch to turn on/off my security system, open/close my garage, read notifications, texts and emails, and respond to some texts. I really wouldn't be without my Apple watch. It's the only thing I for sure carry. I even though about getting the new Pro version, even though it's butt ugly in my eyes. The bigger screen would be nice.
 
Meanwhile Duo pings your iPhone with a simple notification, which can be mirrored on the Duo Watch app. What's so hard about that?
 
Did not know this app was available for AW. In any event using my iPhone to authenticate always worked just fine.
 
We use DuoMobile for second authentication at work and it has a companion Watch app which works very well. Why is Microsoft removing this functionality? Seems like a dumb move. For those who have both Watch and phone, the Watch is generally more accessible than a phone simply because the Watch is worn on the wrist most of the time. At the office, my phone is in my bag which is inside a cabinet.
Yeah.... Our office just switched to Duo for MFA auth when we access any of our server resources. I didn't even try the watch app for it yet, but that sounds useful.

Really does seem like terrible timing for MS to pull support for their authenticator for the watch, though. I'm just now seeing a lot of movement towards requiring MFA to sign into corporate systems. Much of it is driven by insurance companies who are telling businesses they must do this to remain insured against cyber-attacks.
 
Not sure where in the world you are but in the USA the GSA, CISA and NIST begs to differ, in the UK the NCSC begs to differ, in the EU ENISA/CSIRT begs to differ. You couldn't possibly create secure, unique passwords if you don't. I'm sorry but I'm calling bull ****.
You're confusing a password manager with a password generator. Pretty sure secure and unique passwords have existed much longer than password managers, and there has been guidance on how to create them in government for decades.

I should have been specific, a password manager that stores your passwords anywhere else is not allowed, not password managers in general...but most are designed around cloud now anyway.
 


Microsoft Authenticator for iOS will drop support for the Apple Watch companion app from January 2023, the company has revealed.

Microsoft-Authenticator.jpg

Used principally for signing into Microsoft accounts with two-step verification enabled, the Microsoft Authenticator for iOS gained an Apple Watch companion app in 2018.

The watch app supports Microsoft personal, work, and school accounts that are set up with push notifications and lets users bypass the need to pick up their iPhone at all to complete the authentication process.

However, this functionality is being removed at the beginning of next year. Microsoft documented the change to the iOS app in an updated FAQ webpage. In answer to the question "Is Apple Watch supported for Authenticator on iOS?" Microsoft gives the following reply:
Microsoft did not specify which security features the watchOS app is incompatible with going forward, and instead simply directs users to the iPhone or iPad app to authenticate login attempts.

The Microsoft Authenticator app for Apple Watch joins a long list of abandoned third-party watchOS apps that have been discontinued over the last few years, either because of perceived redundancy or lack of user uptake. Other notable Apple Watch apps that have got the chop include Twitter, Instagram, Target, Trello, Slack, Hulu, and Uber.

Article Link: Microsoft Authenticator App for Apple Watch to Be Discontinued in January
That really sucks. I use MS authenticator on the watch all the time. It works great.
 
  • Like
Reactions: NetMage
It does, it really does. But considering the untruths about the use of password managers for government I think the more likely explanation is that you just don't know how it can work. That is fine but don't mix up not knowing with that it can't be done.
It does absolutely not help with a jump box where you cannot share a clipboard and a password manager would not be installed, nor could be installed. As far as the rest here, I think it's you that's mixing up knowing what can and can't be done. Have you actually ever used a government client to connect to a government server?
 
Our company whose IT department is all Microsoft all the time has started using Authenticator’s new feature where you have a generated number you have to enter into the authenticator.

This broke Apple Watch compatibility a few months back.

My guess is this new improved 2FA is what they’re talking about.
 
  • Like
Reactions: cmatuk and fronesis
You're confusing a password manager with a password generator. Pretty sure secure and unique passwords have existed much longer than password managers, and there has been guidance on how to create them in government for decades.

I should have been specific, a password manager that stores your passwords anywhere else is not allowed, not password managers in general...but most are designed around cloud now anyway.
Nope. Again, I have personal experience using a password manager at a government agency. As the other poster pointed out, it's not reasonable to expect people to remember secure, unique passwords without one.
 
  • Like
Reactions: cyb3rdud3
Nope. Again, I have personal experience using a password manager at a government agency. As the other poster pointed out, it's not reasonable to expect people to remember secure, unique passwords without one.
Not reasonable? So 10 years ago all of this was not reasonable? In either of your cases, having used one does not mean that it was "allowed" let alone "recommended".
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.