Engineering / ENG-1491
Administrators at single sign-on depots asked to set up an authenticator
Description
From 09:00 today every administrator who signs in with a password must use MFA (ENG-1431). Administrators who sign in through Entra ID are meant to be left alone: their company's MFA covers them. They were asked to set it up anyway, and the set-up asks for their current password, which they don't have. They couldn't reach the portal. OPS-32.
Steps to reproduce
- Administrator at a client on single sign-on, enforcement date passed.
- Sign in through Entra ID.
Expected: straight into the portal. Actual: "Enter your password to continue", no way past.
Cause: the check looks at the person's sign-in method on their account (password, from before the switch) instead of how this sign-in happened.
Linked issues
- relates to OPS-32 Administrators at single sign-on clients stuck at authenticator set-up Done
- relates to ENG-1431 MFA for administrators Done
Comments (2)
Marek Nowak · 11 Jun 2026, 08:31 UTC
Hotfix out. Brakeline's two IT admins in at 10:34 and 10:40.
Confirming the rule: administrators who sign in through Entra ID or Okta use their company's MFA. We don't add a second one.