Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Simple logins that use enterprise MS accounts still work with an approve or deny. I am updated and I just tested an enterprise app that we have not enabled additional MFA on yet, and my watch is still presenting the approve / deny notifications that mirror the phone.
I usually get the pop-up for our Azure apps. The first screenshot is me logging into the Azure portal with Authenticator 6.7.2. The 2nd screenshot is me logging into the Azure portal with Authenticator 6.7.3. Fortunately, I have iMazing installed so I can go back and forth between the Authenticator versions easily enough.
 

Attachments

  • incoming-9AD5519E-96C2-4C62-9E7B-36CB58549B2D.PNG
    incoming-9AD5519E-96C2-4C62-9E7B-36CB58549B2D.PNG
    308.4 KB · Views: 234
  • incoming-42D02EAE-6372-4FD4-BB2C-352DA9E5FCC0.PNG
    incoming-42D02EAE-6372-4FD4-BB2C-352DA9E5FCC0.PNG
    270.1 KB · Views: 71
  • Sad
Reactions: cjgrif
That's why I wonder why companies or even individuals pay a lot of money for Office 365.
As others have mentioned, it's not just about a word processor, spreadsheet, etc. It's about integration with other services. There is some pretty powerful capabilities that exist in the O365 world that are used regularly by businesses.

Just as one example - I have a Dynamics 365 system that I support that ties in with Office 365. It has a direct tie-in with Excel that my users use to mass-export pricing on thousands of inventory items, update those using a simple formula, and then publish those directly back into the ERP system directly from within the spreadsheet (ie, no having to re-format and save as a .CSV file and then running a secondary import tool - it is one button-push from within the spreadsheet itself). They use this same functionality to create new SKUs as well.

We have a separate financial reporting and budgeting tool that works with Excel where we have various department managers update their expense forecasts throughout the year. It authenticates with their normal Active Directory logins and gives them access only to their own department finances. They can update their budget, and it is published directly into the ERP, where they can continue to track their department actuals against their budget via a web interface. That same web interface also allows upper management to run their own financial reports.

Then, of course, there is PowerBI. If there was no other service offered by O365, PowerBI alone would make the O365 subscription worth it. It is an incredibly powerful dashboarding and reporting tool in itself, and it ties in with all sorts of systems (again, including our ERP and Payroll systems).

I tried Outlook for example and it is really bad compared to free software like Mozilla Thunderbird or other email clients that are available for a small one time fee.
Thunderbird and Outlook aren't really even the same type of program, outside of them both handling e-mail to some extent. For personal e-mail use, yes, Thunderbird is probably simpler to use. Once you get into Calendar sharing, tie-ins with CRM systems or Teams, message archiving, meeting management - there's no comparison at all.

I use Microsoft Excel, but also LibreOffice and Open OpenOffice and can't see that they are worse than Excel. In fact Excel in some ways is worse than those 2. For example Excel uses a single "undo stack" unless you open each file in a separate instance. So if you change some things in several files, you can only undo the change of the last file you changed. It also freaks me out that the "save" icon does not indicate if a file was modified since the last change. Other (no Microsoft) programs often grey out the "save" button if the file has not been modified.
You're nit-picking things here that are generally personal preference. Saves in Excel are pretty quick, so you can always just click the save button before closing if you're not sure if you changed something. Even better - if you're working on a document that's saved in OneDrive or SharePoint, it is auto-saved continuously with versioning anyway, so you don't need to even click "Save" anymore. And the undo stack works the way it does for a reason - many people tend to link data between sheets in Excel, so undoing between sheets makes sense.

Libre and OpenOffice are good products too, but they are pretty limited to fairly basic work. For handling my home budget, Libre would probably work fine (except that I already have access to Excel, so that's what I use). It is when you get into very advanced features (like external data reporting, Slicing/Pivoting, add-ins) that Excel pulls way, way ahead of everything else out there.

Just government institutions in the EU spend €5 billion per year just for Microsoft licenses. I am sure for that money they could develope alternatives to Microsoft products and then use them for free forever. Imagine what you could do with €5 billion in taxpayer money each year.
MS Office has evolved over 3 decades with tens of thousands of developers. Thinking that a government agency could replicate that effort easily and then "use them for free forever" (implying that maintenance would be non-existent) is pretty silly.
 
The OP (me) responded to a comment that started with "LOL" and was itself dismissive of a very important MFA method used by hundreds of thousands of corporate users daily. My one-sentence response was simply a reminder that there is more to the computing world than Apple's ecosystem and that the most common reason for anyone to use Microsoft's Authenticator is because their computer is a tool they use for work. You started out with a childish fanboy attitude and then got butthurt when reminded that the rest of the world doesn't agree with the marketing messages that you apparently agree with.

EDIT: Apologies - I realize that the original comment was a different user.
Thanks for the apology. So rare on the internet.
 
  • Like
Reactions: jakey rolling
Fortunately, I have iMazing installed so I can go back and forth between the Authenticator versions easily enough.
That workaround may only work for so long though. They’ll likely force users to upgrade the app for it to keep working.
 
That workaround may only work for so long though. They’ll likely force users to upgrade the app for it to keep working.
I did hear something about that. I'll only upgrade when I'm forced. I really hope Microsoft relents and re-releases the Watch app.
 
As with any true Microsoft product, it rarely and I do mean rarely ever worked on the  Watch when I tried it.
 
Unfortunately Microsoft removed it from Apple Watch not because of lack of uptake or redundancy but because Apple Watch lacks security features that Apple just didn’t feel like they should address.

Oh well. I’d rather my 2 factor auth be safe.
 
  • Disagree
Reactions: xpxp2002
I guess it depends on the work. In the film business you would be hard pressed to find a windows pc anywhere except as a prop on a show with a MS sponsorship. I’m sure there a few people who use them occasionally, but I rarely seem them. I, for one, never use any MS software outside of a gaming PC I built a few years ago just for games… and I’m considering converting it to Linux.
I nominate this post as Apple Bro post of the month if not year.
 
I’d rather disable 2FA on pretty much everything or be able to choose my own preferred 2FA. Company policy doesn’t allow disabling 2FA though
 
  • Haha
Reactions: strongy
I think at some point this year or next, a lot of major companies will be moving towards Passkey Support as default, doing away with the need for cycling an MFA number. Maybe they see having the number shown on an Apple Watch as being a security risk? And then with another option being the default option at some point soon, why even provide anything on the watch at all other than the need to approve a request.
 
I nominate this post as Apple Bro post of the month if not year.
What does that even mean? I'm commenting about my experience in my industry, and it's true. You rarely see windows based machines on set. Never at DIT. Rarely in the production offices. and only once in the last 30 years in the business did I see someone use one for video playback in a multi monitor setup for a scene and it did not go well. Even the VFX guys who come by to advise VFX shots typically use Macs. I'm not saying there aren't other industries that use other operating systems, Just what is overwhelmingly used in mine. Take your OS war trolling somewhere else.
 
Microsoft...you zuigt(NL), I had to use the authenticator app because they, MS, used a different way to authenticate, I already have an authenticator app, from Ubiquiti, it always worked, until ms managed to use a different way.

Microsoft=rubbish.
 
I tried Outlook for example and it is really bad compared to free software like Mozilla Thunderbird or other email clients that are available for a small one time fee. I use Microsoft Excel, but also LibreOffice and Open OpenOffice and can't see that they are worse than Excel.

I guess everyone's needs and preferences are different, cause as far as mine go, LibreOffice and Thunderbird are utter garbage for corporate spreadsheets and e-mail/calendar/contacts. For personal use, sure, they're good enough (though I'd much rather use Numbers), but O365 simply does way better integration.

Having said that, as far as TOTP goes? I briefly used Google Authenticator, but its design decision not to sync across devices is bad. I moved to Authy and have been happy with that for years, but now I'm moving to iCloud Keychain, because it integrates better. I don't see what I would need Microsoft for in this space. My only two complaints with iCloud Keychain are lack of team sharing and, compared to 1Password, lack of multiple vaults (Keychain itself has this, but iCloud Keychain apparently does not), to separate personal and business.
 
Whelp... there goes the biggest selling point I had for using the Microsoft Authenticator app over SMS for the "Why would I want an app on my phone when I can just get a text" crowd...

That's going to suck, too... I have to authenticate many times a day and it was really convenient to be able to have my watch on and just tap "Approve" whenever I was logging into one of my Microsoft accounts :/
 
Whelp... there goes the biggest selling point I had for using the Microsoft Authenticator app over SMS for the "Why would I want an app on my phone when I can just get a text" crowd...

That's going to suck, too... I have to authenticate many times a day and it was really convenient to be able to have my watch on and just tap "Approve" whenever I was logging into one of my Microsoft accounts :/
Not to mention getting text messages with a code or maybe even a link just isn’t secure anymore, either. Some people may notice an increase in spam texts in the past year or so. A lot of times, the nefarious actor on the other end doesn’t necessarily need you to reply, they just need you to read the message itself. Sending a read receipt acknowledges that you have that phone number. Not to mention that sometimes people just get texts for things and they think it’s work related or something. So they just have a link. I can’t wait until passkey is fully supported everywhere.
 
I don’t think that will work. I believe that Microsoft is making it mandatory for tenants/services to use number matching as MFA method. This should happen late February.

So soon we will unfortunately have to say bye bye to the authenticator app on our wrists. As admin of MS systems I absolutely hate this change.

Actually if the tenant admin does nothing the number matching will not be forced until May.

"We will remove the admin controls and enforce the number match experience tenant-wide for all users of Microsoft Authenticator push notifications starting May 8, 2023."
 
Poor Macrumors reporting. watchOS doesn't meet current guidelines for personal interactive input to respond to a notification. Most of these improvements are NIST guidelines, so it's safer to remove since iOS app can do it. This falls on Apple more than anything else, tell them to not only to innovate, but keep up.
 
  • Haha
Reactions: gank41
And this is why I don't have any Microsoft products, it's in their DNA, if they do something right, they amend it by messing it up latter. Microsoft was and is still full of bozos. They had luck with ChatGPT, they would have never ever made something good with AI by themselves, not in a million years. PD: just wait and see how they will eventually mess up that too, because they are microsoft.
 
Switch on 2 step verification for MS account you have no choice use which Authentication app, only allow MS Authentication app only? Is that correct? So I cannot use iOS build in Authentication for MS account? Nothing online I can find confirm this.
 
Switch on 2 step verification for MS account you have no choice use which Authentication app, only allow MS Authentication app only? Is that correct? So I cannot use iOS build in Authentication for MS account? Nothing online I can find confirm this.
I just checked. There is an option for notification-based push approvals as well as TOTP codes integrated with MS Authenticator. They also support TOTP with third-party apps, SMS, and voice calls.

With corporate accounts, the organization admin can specify which 2FA options are available to users since some policies may prohibit less secure choices, like SMS.
 
  • Like
Reactions: Jay-Jacob
I just checked. There is an option for notification-based push approvals as well as TOTP codes integrated with MS Authenticator. They also support TOTP with third-party apps, SMS, and voice calls.

With corporate accounts, the organization admin can specify which 2FA options are available to users since some policies may prohibit less secure choices, like SMS.
I cannot seem find anything about 3rd party apps support anywhere, all setup guide seem force you use MS own app. It just so annoying that you are stuck one option while others like gmail I can pick and choose.
 
If you log in to https://account.live.com, go to Security, then click "Get Started" under Advanced Security Options.

From there, choose "Add a new way to sign in or verify" and then "Use an app." It will encourage you to install MS Authenticator, but there is an option to set up a different Authenticator app.
1677272998458.png
 
  • Like
Reactions: Jay-Jacob
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.