Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




783 posts

Ultimate Geek
+1 received by user: 343

Subscriber

# 242501 31-Oct-2018 14:38
Send private message

Up until recently we have been happily using Azure AD MFA, with a mixture of users using the app, and some electing to receive a voice call. At some stage recently, calls to NZ land lines stopped working. People using mobile phones are still receiving the verification call, but those using Vodafone and Spark land lines do not get called. Our telco does not see any incoming calls from the source phone number, and is pushing back saying the problem is at Microsoft's end, which my feeling is that it's probably the case.

 

 

 

What do you guys reckon has happened?

 

 

 

 








Filter this topic showing only the reply marked as answer Create new topic
BDFL - Memuneh
63323 posts

Uber Geek
+1 received by user: 13853

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2117447 31-Oct-2018 14:58
Send private message

Assuming no undisclosed specifics (you didn't mention recent change of service providers, number porting, etc), then I think you should contact Microsoft support for this case.







783 posts

Ultimate Geek
+1 received by user: 343

Subscriber

  # 2117454 31-Oct-2018 15:12
Send private message

freitasm:

 

Assuming no undisclosed specifics (you didn't mention recent change of service providers, number porting, etc), then I think you should contact Microsoft support for this case.

 

 

Sorry, forgot the obvious, yes a support call with Microsoft has been raised.

 

Nothing has been changed at our end. MS Support are denying it's a problem and we are not getting any escalation. I would like to present them with a likely explanation of what might have changed at their end.








 
 
 
 


BDFL - Memuneh
63323 posts

Uber Geek
+1 received by user: 13853

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2117455 31-Oct-2018 15:15
Send private message


783 posts

Ultimate Geek
+1 received by user: 343

Subscriber

  # 2117843 1-Nov-2018 13:48
One person supports this post
Send private message

To bring closure to this, the source phone number for the MFA call was being blocked by both Vodafone and Spark, but only for landlines. Our provider stated to us that there were no calls logged from that number in the days it wasn't working. They didn't say that it was blocked however. I interpret this to mean that either they share a block list, or there is a mechanism upstream from both providers for blocking. Either way, changing the source phone number got it working. It is concerning that this can happen though.

 

 

 

 








14 posts

Geek


  # 2123733 11-Nov-2018 21:36
Send private message

How did you change the source of the call?

 

 

 

We are experiencing similar... but with kordia as the upstream provider.. 
We are only just testing landlines as an authentication mechanism as have always used mobile or app till now.

 

 




783 posts

Ultimate Geek
+1 received by user: 343

Subscriber

  # 2123800 12-Nov-2018 07:40
Send private message

vonfluffy:

 

How did you change the source of the call?

 

 

Go to the azure portal at https://portal.azure.com

 

Go to Azure Active Directory -> MFA -> Phone call settings. There is a box where you can change the US phone number.

 

We weren't sure of the number format rules for the US, so just incremented the last digit.








BDFL - Memuneh
63323 posts

Uber Geek
+1 received by user: 13853

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2123801 12-Nov-2018 07:43
One person supports this post
Send private message

Another reason for people to use TOTP instead of SMS or phone calls... If you add one cog to the machine (the telco) things are more likely to fail.







783 posts

Ultimate Geek
+1 received by user: 343

Subscriber

  # 2123804 12-Nov-2018 08:02
Send private message

freitasm:

 

Another reason for people to use TOTP instead of SMS or phone calls... If you add one cog to the machine (the telco) things are more likely to fail.

 

 

Then every system you want to add MFA to needs to support a box to type the TOTP code into. So you wouldn't use approve/deny in the app either? That requires Wifi or data via a telco.

 

 








BDFL - Memuneh
63323 posts

Uber Geek
+1 received by user: 13853

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2123852 12-Nov-2018 08:22
Send private message

TOTP is time-based, does not rely on a telco in the middle.

My point is that a system with less components is usually more fail-proof than a system with more.






783 posts

Ultimate Geek
+1 received by user: 343

Subscriber

  # 2123890 12-Nov-2018 08:37
Send private message

freitasm: My point is that a system with less components is usually more fail-proof than a system with more.

 

I don't disagree. Nor do I want to anger the BDFL by arguing too much. :-)

 

I'm simply saying there are situations where TOTP doesn't work. App or voice call approve/deny can be applied to anything that talks RADIUS.

 

Personally I think voice call is crusty-as, but I have a few crusty-as users who don't have cell phones. Yes you read that.

 

 








Filter this topic showing only the reply marked as answer Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

WLG-X festival to celebrate creativity and innovation
Posted 22-May-2019 17:53


HPE to acquire supercomputing leader Cray
Posted 20-May-2019 11:07


Techweek starting around NZ today
Posted 20-May-2019 09:52


Porirua City Council first to adopt new council software solution Datascape
Posted 15-May-2019 12:00


New survey provides insight into schools' technology challenges and plans
Posted 15-May-2019 09:30


Apple Music now available on Alexa devices in Australia and New Zealand
Posted 15-May-2019 09:11


Make a stand against cyberbullying this Pink Shirt Day
Posted 14-May-2019 20:23


Samsung first TV manufacturer to launch the Apple TV App and Airplay 2
Posted 14-May-2019 20:11


Vodafone New Zealand sold
Posted 14-May-2019 07:25


Kordia boosts cloud performance with locally-hosted Microsoft Azure ExpressRoute
Posted 8-May-2019 10:25


Microsoft Azure ExpressRoute in New Zealand opens up faster, more secure internet for Kiwi businesses
Posted 8-May-2019 09:39


Vocus Communications to deliver Microsoft Azure Cloud Solutions through Azure ExpressRoute
Posted 8-May-2019 09:25


Independent NZ feature film #statusPending to premiere during WLG-X
Posted 6-May-2019 22:13


The ultimate dog photoshoot with Nokia 9 PureView #ForgottenDogsofInstagram
Posted 6-May-2019 09:41


Nokia 9 PureView available in New Zealand
Posted 6-May-2019 09:06



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.