Azurestorageexplorer: Multiple login prompts when using an account with MFA enabled

[cbailiss]

Storage Explorer Version: 1.3.1
Platform: Windows
Architecture: ia32
Build Number: 20180711.1
Commit: 9a954726

Steps to Reproduce:

Using an MSA account (hotmail, live, etc).
Account is tenant admin in Azure and has MFA enabled in Azure.
Account has two subscriptions (one PAYG, another Visual Studio credits).
Signing into storage explorer, I have to login three times.
First time: Username-Password.
Second and third times: Username, Password, MFA text message code.

Expected Experience:

Login once.

Actual Experience:

Have to login three times, as described above.

[johnstaveley]

I also have to login 3 times. When this was only 2 times with MFA I was promised it was fixed in a future release. In fact it is worse. One thing I would note is that once I finally login my pay as you go account is listed 3 times but does not expand to anything.

[CraigLittlewood]

I also have to login 3 times!

[sjkp]

This is by far the worst thing about storage explorer. I work as a consultant and have access to many azure subscriptions. Many of which require MFA (for good reasons). I get 10+ login prompts now. I try to only accept the first one, and then just close all the others, eventually it usually works, but it is so annoying that I'm starting to use access keys instead, which is very bad security practice.

Could you please add an option to just login to a single (user defined) tenant, I'm okay if I have to start storage explorer with a commandline argument that specify tenantId or something similar, but the current situation is so frustrating.

[cbailiss]

I hope the fact this has been added to a milestone means it will soon be addressed (after nearly two years!). Really, it is quite a bad experience to get annoyed with an application even before you have finished opening it!

[MRayermannMSFT]

Could you please add an option to just login to a single (user defined) tenant

@sjkp , this is where we would like to go in the future. Unfortunately as of right now though, logging into every tenant is the only option the auth library we are using exposes.

I hope the fact this has been added to a milestone means it will soon be addressed

@cbailiss I hate to dash your hopes, but I've done some more digging, and this unfortunately is not going to be fixed for 1.14. I'm not even sure when we'll get the capability to only log into user specified tenants, so I'm going to be moving this to a later milestone to check in on it then. I definitely understand how the experience is currently cruddy

[TechWatching]

Same issue for my team. This is a real problem because it encourages bad practices like using connection string instead login with our user who have been authorized to access storage account. Multiple tenants and multiple subscriptions all with MFA require a very long time before accesssing just one azure blob storage. I hope it will get fix really soon.