KI 1257 How to use multi-factor authentication when you have no net or mobile coverage

This is especially relevant for people on e.g. field work without mobile/wifi coverage. It may also be useful in situations where you want to avoid expensive data roaming.

If you are without mobile and net coverage, you can use a changing one-time password from the MS Authenticator app on your mobile phone.

The Authenticator app then basically acts as a code key.

To achieve this, you must first change the default method for two-factor login. (See KI 0799 How do I change the default method for two-factor login? For a detailed description.)

On the My Sign-Ins page, change the login method to Authenticator app or hardware token - code:

Then you will be able to use a code from the phone which Cisco AnyConnect will ask for, without the phone having coverage.