Multi Factor Authentication (MFA) - Why does the app request so many permissions?

This article explains why the Microsoft Authenticator app requests various permissions on your device and how each permission is used to provide secure authentication functionality.

Microsoft Authenticator App Permissions

Essential Permissions

  • Camera: Used to scan QR codes when adding work, school, or non-Microsoft accounts to the app.
  • Draw over other apps: Allows verification notifications to appear over other apps you might be using, ensuring you don't miss important security prompts.
  • Internet access: Required to send and receive authentication notifications and verify your identity securely.
  • Run at startup: Ensures you continue to receive verification notifications even after restarting your device.

Optional and Convenience Permissions

  • Contacts and phone: When signing in with a personal Microsoft account, this helps find existing accounts you use on your phone to simplify the process.
  • SMS: During initial setup with a personal Microsoft account, the app can automatically read verification codes sent via text message instead of requiring you to manually enter them.
  • Vibration control: Allows the app to vibrate your device when you receive a verification notification, providing an additional alert method.
  • Fingerprint hardware: Enables you to use your fingerprint instead of entering a PIN when verifying your identity (for accounts that require an additional PIN).
  • Prevent phone from sleeping: May be required if your organization has specific device policies enabled.

Troubleshooting Permissions

  • Storage access: Only used when reporting technical problems through the app settings. Information from your storage may be collected to diagnose issues.
  • View network connections: Required when adding Microsoft accounts to ensure proper connectivity.

Privacy and Security

Microsoft Authenticator is designed with your privacy and security in mind. The permissions requested are limited to those necessary for the app to function properly and provide a seamless authentication experience.

If you have concerns about specific permissions, you can manage app permissions in your device settings. However, restricting essential permissions may limit the app's functionality.

Need Additional Support?

If you have any questions about Microsoft Authenticator permissions or need assistance with MFA, please contact the ITS Help Desk:

This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!



Keywords:
mfa, multi factor authentication, permissions, app, authenticator app, privacy, microsoft authenticator, camera, contacts, sms, vibration, storage 
Doc ID:
124411
Owned by:
Aaron W. in Southern Illinois University Edwardsville
Created:
2023-02-28
Updated:
2025-03-18
Sites:
Southern Illinois University Edwardsville