Multi Factor Authentication (MFA) - Why does the app request so many permissions?
Microsoft Authenticator App Permissions
Essential Permissions
- Camera: Used to scan QR codes when adding work, school, or non-Microsoft accounts to the app.
- Draw over other apps: Allows verification notifications to appear over other apps you might be using, ensuring you don't miss important security prompts.
- Internet access: Required to send and receive authentication notifications and verify your identity securely.
- Run at startup: Ensures you continue to receive verification notifications even after restarting your device.
Optional and Convenience Permissions
- Contacts and phone: When signing in with a personal Microsoft account, this helps find existing accounts you use on your phone to simplify the process.
- SMS: During initial setup with a personal Microsoft account, the app can automatically read verification codes sent via text message instead of requiring you to manually enter them.
- Vibration control: Allows the app to vibrate your device when you receive a verification notification, providing an additional alert method.
- Fingerprint hardware: Enables you to use your fingerprint instead of entering a PIN when verifying your identity (for accounts that require an additional PIN).
- Prevent phone from sleeping: May be required if your organization has specific device policies enabled.
Troubleshooting Permissions
- Storage access: Only used when reporting technical problems through the app settings. Information from your storage may be collected to diagnose issues.
- View network connections: Required when adding Microsoft accounts to ensure proper connectivity.
Privacy and Security
Microsoft Authenticator is designed with your privacy and security in mind. The permissions requested are limited to those necessary for the app to function properly and provide a seamless authentication experience.
If you have concerns about specific permissions, you can manage app permissions in your device settings. However, restricting essential permissions may limit the app's functionality.
Need Additional Support?
If you have any questions about Microsoft Authenticator permissions or need assistance with MFA, please contact the ITS Help Desk:
- Call: (618) 650-5500
- Email: help@siue.edu
- Visit: Lovejoy Library Room 0005 during regular business hours.
This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!