Password reset does not stop access if valid MFA token

Robert Cook 1 Reputation point
2020-06-09T16:35:27.99+00:00

Using MFA Server with ADFS Adapter

If a MFA enabled user changes their password, email is still accessible on phone without having to change password, assuming until token expires.

I have read with Azure AD the refresh token would require the device to re-authenticate, I cant see an option to achieve this using MFA Server & ADFS.

Is this possible?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,201 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,661 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. T. Kujala 8,706 Reputation points
    2020-06-09T17:24:57.983+00:00

    Yes, it is possible.

    Here you will find more information how to configure token lifetimes.

    https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes