Abstract: Techniques for determining whether to send an MFA push notification are described. An indication of a request for a user account to access the application service via an endpoint device is received at an MFA service from an application service. A first geolocation of the endpoint device and a second geolocation of an MFA-registered device associated with the user account are received at the MFA service. Using the first and second geolocation, determine whether the endpoint device and the MFA-registered device are within a threshold proximity. When the endpoint device and the MFA-registered device are within the threshold proximity, allows a push notification to be transmitted to the MFA-registered device requesting authentication to grant access to the user account by the endpoint device, and when the endpoint device and the MFA-registered device are not within the threshold, refrain from transmitting the push notification.