Avoid MFA every single time by "trusting the browser" or "remembering this device" (edited)

2»

Comments

  • Dan6912
    Dan6912 Member

    +1 vote

  • RobWilk
    RobWilk Superuser ✭✭✭✭✭

    In theory, this is happening one financial institution at a time right now, which is the only way this can happen; this post as a whole is otherwise too general to be useful.


    Rob Wilkens

  • CMM
    CMM Member

    +1…really hoping we get a fix soon. This has been very frustrating.

  • jtb36
    jtb36 Member

    Do we need to start creating individual posts for each financial institution that is requiring 2FA every time we log on to be addressed?

    This is becoming a very frustrating part of Simplifi.

  • perrynmyers
    perrynmyers Member ✭✭✭✭

    Bumping this request since this is something that should be implemented, otherwise automatic refresh for many of us simply fails each night and we get error messages in the morning.

  • Zsawaged
    Zsawaged Member

    PLEASEEEE address this already

  • Please fix this problem! It's one of the most annoying things about Simplifi! Other companies have clearly figured out a fix. Follow suit!

  • garzajp93
    garzajp93 Member

    Any updates?

  • This would be super helpful for the Venmo integration.

  • imdZigman
    imdZigman Member

    Empower Retirement, which manages various 401k plans, etc, also has this problem on Simplifi, though it didn’t originally. However, with other aggregators, this is not required, because the “remember this device” option is part of the process. Note…the screen shot below is part of the “add account” process for another aggregator.


    What makes it worse is that Empower only allows daily updates between 1 am and 5 am ET, so Simplifi users basically have to wake up during those hours to be able to manually update the account and enter the MFA code.

  • rk86
    rk86 Member

    +1 for Venmo

  • RobWilk
    RobWilk Superuser ✭✭✭✭✭

    The "empower" thing above is clearly an "OAuth" login, which I imagine simplifi lacks for that provider. OAuth, I believe, is where they redirect you to the bank site to log in (I believe if successful, it passes back a token authorizing the account) - and it's here where the bank can 'remember' your account. I don't think you'll ever see that 'remember' option for sign-ins where simplifi collects (in its own prompts) your username and password.


    Rob Wilkens

  • imdZigman
    imdZigman Member
    edited November 16

    They did use an intermediary, as does Simplifi ….just a different one. Regardless of what is occurring, the current Simplifi approach simply is not practical or acceptable in a case where the update can only occur during overnight hours.

    My intent was to show it is possible, and is being done by multiple other aggregators, so Simplifi should prioritize this change, instead of just telling us to vote for a better MFA approach on a separate thread that’s two years old. Most of that thread is about other financial institutions that while doing MFA each time is annoying, could be nonetheless updated any time of day, unlike Empower.