Enterprise customer with an E3 license. 450 users.
Enabled MFA(Multi-Factor Authentication) a month ago for testing. Also enabled is the "Modern Authentication" for Exchange and Skype for Business.
I am the lone user of MFA. It has been enabled and enforced for my user. It works as expected with Outlook 2016, and office 365 as well as the Admin portal. (I am an admin).
I am using the Microsoft authentication app. I have successfully used both the push notification as well as texting and the 6 digit security code generated by the app.
I have discovered, however, that I can completely bypass MFA. On a brand new workstation, launch "outlook /safe" from the run command.
Go through the process of setting up the email. Enter your normal credentials (email address and password). It works. Never prompts for MFA. I have full email access and...