Information Regarding Excessive Multi-Factor Authentication Prompts

Issue/Question

Why do I receive excessive Multi-Factor Authentication prompts when accessing my My Macomb account or other College applications?

Environment

  • My Macomb
  • College Applications

Resolution

By design, Macomb Community College’s Multifactor Authentication policy is configured not to prompt for MFA when signing-in from an organization provided Windows 10 or 11 device, while connected to the campus network.

All other computers, mobile devices, and/or connected networks are configured to prompt for MFA once every 7 days.

If you are receiving an excessive amount of MFA prompts, there may be one or more factors contributing to receiving an excessive amount of MFA prompts.

Optimal Configuration

If possible, please sign-in via Microsoft Edge only, from a Macomb-provided Windows device, and only connect to the campus network for an optimal experience.

All other configurations are considered less secure and as such are subject to stricter MFA policies.

Device & Network

As stated above, Macomb’s organization-provided Windows 10 and 11 devices are configured to prompt for MFA less frequently while connected to the campus network. Personal devices, including mobile devices and personal computers are expected to prompt for MFA approx. once every 7 days.

Web Browser

While some web pages and applications may function better in some web browsers than in others, Macomb Community College recommends the use of Microsoft Edge where possible.

Microsoft Edge natively supports Macomb Community College’s security tools and standards, and as such supports the organization’s MFA configuration by default.

Note: As of 2018, Microsoft Edge is built upon Google’s Chromium code base and is designed to run web apps and pages similarly to Google Chrome.

Several conditions could cause your browser to unexpectedly prompt for MFA, including:

  • Deleting browser session cache
  • Signing-in from a private browsing window

Sign-in Sessions

Every device and web browser keeps its own records of signed-in sessions, and each session will be subject to the policies above separately.

For example, if you sign in from a personal computer, you will receive an MFA prompt. If you then sign-in from a mobile device, you will receive another MFA prompt on the new device. To keep both devices signed-in, both will receive prompts again in 7 days.

Similarly for browsers, if you sign-in from Google Chrome, you will receive an MFA prompt. If you then sign-in from Mozilla Firefox, you will receive another MFA prompt. To keep both browsers signed-in, both will receive prompts again in 7 days.