Pre-configure Microsoft Authenticator Application
I was wondering if its possible to pre-configure Microsoft Authenticator application when pushed out through SCCM/Intune for managed devices. It would be nice if the Authenticator Application could be pre-configured with both Code & URL-Address for the MFA setup, so that end-users wont have to do it themselves. It would also enhance the security aspect if its pre-configured centrally.
This wouldn't meet binding requirements for MFA and it wouldn't work in a package as the QR codes are unique for each user as well as the QR code being time specific. Keep in mind, most automated software packages run as System or similar accounts on the device. Which would also cause binding issues/ challenges for the user as they never would be associated to the authenticator in the MFA system.
Cha Yang commented
Please add features. We would like to see this also.
We also need this. To tie Authenticator App MFA to managed device during enrollment.
Eric Grabowski commented
Great idea! My team was just discussing this same topic yesterday!
Simon hoddinott commented
I think this is an excellent idea. lowers a significant barrier to entry in my opinion.