MFA authentication app produces the same token name for different Tenant and for all environments
Last Updated:
Overview
A customer wanted to use an MFA authenticator app. They noticed that what they termed the ' Authentication App Token' the name generated by the app was the same for different tenants ( but for the same environment ). If you scan the QR code, for different tenants but for the same environment, the ' Authentication App Token' had the same name.
The customer wanted to change the name of the ' Authentication App Token'.
Specific example:
1- With Google Authenticator, we have a list of Token Names that have the same
2- With Microsoft Authenticator, we can't add two or more Token with the same name. If you try to add more tenants, every time it's necessary to reset MFA and then re-register App.
Cause
Solution
There is no solution to this problem. The initial token name comes from the QR code the IDP generates. There may be some Authenticator apps that allow renaming it later. The limitation of having only one token with the same name comes really from the app - it is outside of our control.
You might suggest to the customer that they try alternative MFA apps:
https://uk.pcmag.com/security/133038/the-best-authenticator-apps
https://geekflare.com/two-factor-authentication-apps/
