-
The company makes the rules under which you are employed. If you don’t like it, legislate against it or find another employer. Also, like I said, there are no 3rd party authenticators that are more secure with entra ID.
-
Like I said, M$ auth literally does not report location while authenticating. It only pulls location requests when signing in through the app to create the authentication token and even then it is not a requirement. Entra pulls location using your IP address on the device you are signing in with.
Windows 11 pro OOBE > get device online either via WiFi or wired network or bypass via commands > set up for school or work > sign in options > Domain Join. This asks you for local account name and password for a local administrator account and then drops you on the login screen.