# 2FA challenge at ADFS login

Users cannot log in to Zivver in Outlook with ADFS single sign-on (SSO).

The user is not automatically logged in to Zivver in Outlook. If the user logs in manually, they receive a 2FA challenge on their Windows workstation. This also happens with both Windows and Kerberos exemptions in the Zivver admin panel.

## Cause

Windows Authentication is not enabled under Intranet.

To diagnose the issue, follow these steps:

1. Go to **ADFS Management Console** > **Service** > **Authentication Methods**.
2. Under **Primary Authentication Methods**, click **Edit**.

Warning

Perform an impact analysis before implementing a solution.

## Solution 1

Add [WIASupportedUserAgent as an ADFS property](https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-browser-wia).
This enables logins using Windows Authentication. By default, this option is enabled.

## Solution 2

Consider enabling Windows Authentication in the ADFS Management Console.

Updated on 2025-10-13