Just transitioned from a Google + slack company to a Microsoft account company.
I asked if we put our email accounts on our phones to be able to answer after hours, my supervisor said very few people are given access to emails on their phones.
I am fine with the switch, I used to get 40-60 emails to sort through a day. Now I will be doing maybe 5-10 a day and only 3 or 4 might actually be for me and I only have an 8 hour day with no after hours meetings.
I've had a company require employees to install MDM on personal phones (remote control/management) to be allowed to use them for 2fa app or email access.. there was a surprised Pikachu when I refused. Eventually they issued me a company phone, because it was impossible to do most tasks without 2fa. That device was on 9 to 5 only.
Because the only 2FA allowed was onelogin push. Don't ask me why.
They also used an "enterprise" VPN that was acquired by some larger company, was pretty much abandoned at that point and only worked with a proprietary client that took days to set up on Linux - this was fun for me and all my colleagues who ended at that sad company as a result of an acquihire and were 80% devs running linux.
Just transitioned from a Google + slack company to a Microsoft account company.
I asked if we put our email accounts on our phones to be able to answer after hours, my supervisor said very few people are given access to emails on their phones.
I am fine with the switch, I used to get 40-60 emails to sort through a day. Now I will be doing maybe 5-10 a day and only 3 or 4 might actually be for me and I only have an 8 hour day with no after hours meetings.
I've had a company require employees to install MDM on personal phones (remote control/management) to be allowed to use them for 2fa app or email access.. there was a surprised Pikachu when I refused. Eventually they issued me a company phone, because it was impossible to do most tasks without 2fa. That device was on 9 to 5 only.
Why not just a physical TOTP token? There's ones that do 100 Tokens, probably won't need more than that. Smartphone for 2fa seems overkill.
Because the only 2FA allowed was onelogin push. Don't ask me why.
They also used an "enterprise" VPN that was acquired by some larger company, was pretty much abandoned at that point and only worked with a proprietary client that took days to set up on Linux - this was fun for me and all my colleagues who ended at that sad company as a result of an acquihire and were 80% devs running linux.