Fix Microsoft Authenticator Requesting MFA Multiple Times Daily
Question details
The user needs to stop Microsoft Authenticator from repeatedly prompting for multifactor authentication despite having a relaxed Conditional Access sign-in frequency configured.
- Product
- Microsoft Authenticator / Microsoft Entra
- Device & OS
- MacBook, iPhone, Windows
- Scenario
- Attempting to maintain active Office 365 authentication sessions without being forced to approve MFA multiple times a day or week.
- Observed behavior
- MFA prompts appear multiple times a day or weekly, ignoring the configured 14-day or longer sign-in frequency set by the tenant administrator.
Ensure you have administrative access to the Microsoft Entra admin center and ask the affected user to keep their devices readily available for testing.
Review and Adjust Conditional Access Policies
Identify if a stricter Conditional Access policy is overriding your longer sign-in frequency setting.
Microsoft Entra evaluates all Conditional Access policies during sign-in. If multiple policies apply to a user, the most restrictive policy is enforced. For example, if one policy sets a 14-day session but another requires MFA every time for a specific cloud app, the user will face frequent prompts.
Sign in to the Microsoft Entra admin center, navigate to 'Identity' > 'Users', and select 'Sign-in logs'.
Search for the specific user experiencing the issue and click on one of the recent MFA prompt events.
Click the 'Conditional Access' tab within the event details to see exactly which policies evaluated to 'Success' and forced the MFA prompt.
Navigate to 'Protection' > 'Conditional Access' > 'Policies' and adjust the session controls or exclude the user/device from the conflicting restrictive policy.
Verify Device Registration and Browser Settings
Ensure that authentication tokens are correctly saved and not being wiped by device or browser privacy settings.
Boost Productivity Offline with WPS Office
If frequent Microsoft 365 cloud authentication issues and MFA prompts are disrupting your workflow, consider using WPS Office as a lightweight, reliable alternative. It provides powerful tools for creating and editing documents without requiring constant cloud connectivity or repeated logins.
- 1. Download the Installer: Visit the official WPS Office website and download the free version for your Windows, Mac, or mobile device.
- 2. Install WPS Office: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup in seconds.
- 3. Open Your Files Offline: Launch WPS Office to immediately start editing your existing Word, Excel, and PowerPoint files without worrying about session timeouts.
Frequently Asked Questions
Why is Microsoft Authenticator prompting me every time I open my browser?
This happens when your browser is set to delete cookies upon closing or when using a private browsing window. Because the session cookie (Primary Refresh Token) is deleted, Microsoft Entra does not recognize your device and prompts for MFA again.
Can switching networks trigger a new MFA prompt?
Yes. If your organization's Conditional Access policies are tied to trusted IP addresses or specific locations, switching from a corporate Wi-Fi network to a home network or cellular data will invalidate the trusted state and trigger a new MFA request.
How do I fix frequent MFA prompts on macOS and iOS devices?
For Apple devices like MacBook and iPhone, ensure that the Microsoft Enterprise SSO plug-in is correctly deployed via your MDM (Mobile Device Management) solution, and that the Microsoft Authenticator app is fully updated and granted necessary permissions.
