#003UrgentIdentity & accessDifficulty 2/3
Employee lost the phone with Microsoft Authenticator
Reported by Marco Reyes, Lead Designer
Intake
Marco's phone was stolen at a market on Saturday. He cannot sign in anywhere on Monday morning and has a client deadline.
Evidence gathered
- ▸Phone was not enrolled in any device management and had no passcode confirmed
- ▸Authenticator was his only MFA (Multi-Factor Authentication) method
- ▸He was signed into Outlook, Teams and the design library on that phone
- ▸No documented recovery procedure exists
Guided diagnosis
1. Before restoring access, what must happen because the device is stolen?
2. How do you verify it is really Marco asking for a reset?
3. What is the right way to get him working again?
4. Which preventative change follows from this incident?