The user is constantly re-demanded to authenticate or validate MFA.
Probable causes
- Conditional Access
- tokens/cookies
- MFA method failing
Verifications.
- Test Private Browser – Clear local cache.
- Read Sign-in-news — Identification of applied policy.
- Check MFA methods – Control registration.
Solutions…
- Correcting policy CA
- Revoking sessions if necessary
- Reregister MFA method
When to climb?
Climb before changing a global Conditional Access rule.