Re: Microsoft MFA "Deny" Timeout

["Menne, Michael S" <michael.menne () MNSU EDU>]

They shouldn’t get permanently locked out if they hit deny. I’ve done it on my own account and never been locked out 
permanently. All I have to do is close the application or browser window and login again. That said, there may be a 
setting I am unaware of in O365 configuration.



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Pardonek, Jim" 
<jpardonek () LUC EDU>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Monday, November 16, 2020 at 3:02 PM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Microsoft MFA "Deny" Timeout

I’m probably being stupid, but we are having issues with users that inadvertently hit deny when getting prompted from 
the Microsoft Authenticator app getting locked out and having to call the service desk to get their account re-enabled. 
 I know that DUO has a timeout.  Is there a configurable one in Microsoft?

James Pardonek, MS, CISSP, CEH, GSNA
Associate Director
Chief Information Security Officer
Loyola University Chicago
1032 W. Sheridan Road | Chicago, IL  60660

•: (773) 508-6086

Loyola University Chicago will never ask you for your username or password.
For the latest information security news at Loyola, please follow us online,
Twitter: @LUCUISO
Facebook: 
https://www.facebook.com/lucuiso/<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Flucuiso%2F&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C02054ff0fff747a7261d08d88a72e73c%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C1%7C637411573400265229%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=j5YM6qjOcnkf5%2F2o%2B25ZM%2F%2BU9QcqqsMwxQcxOAxLtJU%3D&reserved=0>
Our Blog http://blogs.luc.edu/uiso/


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmichael.menne%40MNSU.EDU%7C02054ff0fff747a7261d08d88a72e73c%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C1%7C637411573400265229%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=K1ppeJxBhU5nGi3uu%2FFnhbYHYhq7Q7c1Rj0Sp5rcm2w%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community