Abstract: Techniques for determining whether to send an MFA push notification are described. An indication of a request for a user account to access the application service via a primary device is received at an MFA service from an application service. Using a PAN protocol, determine whether the primary device and the secondary device are within a threshold proximity. When the primary device and the secondary device are within the threshold proximity, allows a push notification to be transmitted to the secondary device requesting authentication to grant access to the user account by the primary device, and when the primary device and the secondary device are not within the threshold, refrain from transmitting the push notification.

Abstract: Techniques for determining whether to send an MFA push notification are described. An indication of a request for a user account to access the application service via an endpoint device is received at an MFA service from an application service. A first geolocation of the endpoint device and a second geolocation of an MFA-registered device associated with the user account are received at the MFA service. Using the first and second geolocation, determine whether the endpoint device and the MFA-registered device are within a threshold proximity. When the endpoint device and the MFA-registered device are within the threshold proximity, allows a push notification to be transmitted to the MFA-registered device requesting authentication to grant access to the user account by the endpoint device, and when the endpoint device and the MFA-registered device are not within the threshold, refrain from transmitting the push notification.