So my company decided to migrate office suite and email etc to Microsoft365. Whatever. But for 2FA login they decided to disable the option to choose “any authenticator” and force Microsoft Authenticator on the (private) phones of both employees and volunteers. Is there any valid reason why they would do this, like it’s demonstrably safer? Or is this a battle I can pick to shield myself a little from MS?

  • @[email protected]
    link
    fedilink
    126 months ago

    I put the stupid app on my phone.

    Never use your own personal phone for work related stuff.

    If they want you to use a phone-based app, ask them to help you install it, then bring in an early-2000s feature phone that boots straight from ROM, no Android or KaiOS under the hood.

    As in, force the company to get you a company phone.

    • @[email protected]
      link
      fedilink
      116 months ago

      Never use your own personal phone for work related stuff.

      As someone who does this, my main issue is now I am carrying around two phones. This is a daily annoyance for me.

      My next round I think I am going to drop the work phone and use Androids profile options. Setup a work profile on my personal phone and just use that. Then just have work reimburse me for my personal phone/plan.

      • Natanael
        link
        fedilink
        26 months ago

        Contact a lawyer that specialize in worker rights. If they make you use private property for work they should compensate you

      • @[email protected]
        link
        fedilink
        1
        edit-2
        6 months ago

        What am I going to do, quit over using an app?

        Why quit?

        Ask them for help installing the app.

        Then bring in an early-2000s flip phone with your SIM already in it, so you can prove that you are using it.

        An employer cannot demand that you buy your own work tools unless it is written into the employment contract (auto mechanics, etc.). Provide them with a phone that they themselves cannot install the app on. Any early-2000s feature phone will not have an operating system with app functionality. An older but still smartphone-like BlackBerry running BBOS10 will also work in this regard, especially if you have uninstalled the Amazon App Store.

        Even an Android phone whose newest possible version of Android pre-dates the oldest version that this app will install on can also work. For example, any Android phone which cannot be upgraded past Android 7 would be perfect with respect to MS Authenticator, as the current version will only install on Android 8 or newer. If you bring in a phone that has no ability to have Android 8 or later installed, your place of work will either have to exempt you or provide you with a work phone for that app.

        You have solutions to keep work apps off of your personal devices, and few employers will have the legal ability to force you to buy a modern phone just for an app of their choosing. Moreover, it is your right to not have to suffer unreasonable employer demands just to have a job. That’s why worker protections exist in places where conservatives haven’t eviscerated those protections.

        Act like you are a smartphone-phobe, and let them figure things out.

          • @[email protected]
            link
            fedilink
            16 months ago

            You do what you think you need to do, buuuuuut…

            I’m in a senior level engineering position.

            You are already exceedingly difficult to trivially replace. It’s entry-level devs which are a dime a dozen. Senior level engineering positions are frequently open for many months because candidates in general are difficult to find, much less good candidates.

            Colour me biased, but I strongly think you are significantly underselling your own power and influence. Any company worth working for isn’t going to turf a senior engineer over a $40 stipend unless their middle manglement positions are staffed with morons.

            Well, it’s your calculus to make, not mine.