Issue
I keep getting prompted to complete Multi-Factor Authentication (MFA), even though I select "Remember me for 30 days" or "This is my device".
Environment
Duo and Microsoft Authenticator MFA
Cause
This issue is usually caused by the browser not retaining the cookie that allows the device to be remembered for thirty days. There could be several causes for this:
- Browser cookies are being cleared or blocked. This is the most likely issue, and it could be caused by several things:
- Browser configured to clear cookies on exit
- Use of InPrivate/Incognito browsing
- Third-party or cross-site cookies being blocked
- Privacy extensions (uBlock, Ghostery, Privacy Badger, etc.)
- Safari cross-site tracking protections
- User is switching browsers. This is less likely, but if the user remembers the device in Chrome, but then logs in from FireFox on the same device, they will be prompted again because different browsers don't share cookies.
Resolution
Recommended troubleshooting steps:
- If using Safari, try a different browser. By default, Safari prevents users from using "remember me" features that rely on browser cookies.
- If switching between multiple browsers, make sure that you select the "remember me" option in each one, as that setting is local to the browser. For example, remembering the device in Chrome will not carry over to Edge or Firefox; you must click "remember me" in each browser.
- Verify that you are not using InPrivate/Incognito mode in your browser, which causes cookies to be cleared when the browser is closed.
- If you have installed any third-party security software or browser plug-ins that may be clearing the cookie, try disabling them.
- Check your browser settings to see if the feature for clearing cookies on exit is enabled.