Tracking Passwordless Sign-in Failures in Azure by Dmitriy Beryoza

This report describes an investigation into MFA fatigue attempts against Azure passwordless authentication (Microsoft Authenticator) where abandoned prompts produced a novel error code (1003033) and incomplete sign-in log fields, complicating detection and response. The author maps the error to the PIN Credential Provider, shares a Kusto hunting query to find failed passwordless attempts, and urges cloud providers to document and enrich logs to aid security monitoring.