Forum Discussion

ilmaestro7's avatar
ilmaestro7
Copper Contributor
Mar 03, 2025

Can't access Intune Company Portal from Android device after enabling Phishing resistant MFA

HI, Since I enabled Phishing resistant MFA in my tenant, I have been unable to access the company portal on my android phone. Login starts the auth process, but the app keeps telling me that it does...
Azure AD
multi-factor authentication
KaliN's avatar
KaliN
Copper Contributor
Mar 09, 2025

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths#built-in-authentication-strengths

Phishing-resistant MFA strength allows the following combinations:

  • Windows Hello for Business
  • Or
  • FIDO2 security key
  • Or
  • Microsoft Entra certificate-based authentication (Multifactor)

 

If you don't one of those setup. You being prompted for Passkey is expected.


https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-deploy-phishing-resistant-passwordless-authentication#plan-device-readiness

 

Ensure that your devices are prepared for phishing-resistant passwordless by patching to the latest supported versions of each operating system. Microsoft recommends your devices are running these versions at a minimum:

  • Windows 10 22H2 (for Windows Hello for Business)
  • Windows 11 22H2 (for the best user experience when using passkeys)
  • macOS 13 Ventura
  • iOS 17
  • Android 14

 

If your Android Device is lower than 14, then you can't create passkeys.

Resources