Two-step, MFA and Conditional Access
Signing in with Microsoft adds your organization’s protections to ours — it doesn’t replace them.
Why Rogue Productions still asks for its own two-step code
Microsoft decides how you prove yourself to Microsoft. Rogue Productions decides how you prove yourself to Rogue Productions. Keeping our own second step means your Rogue Productions account stays protected even if a Microsoft account is compromised, misconfigured, or belongs to an organization with weaker rules — and it works the same for everyone, including personal accounts.
You set it up once (an authenticator app or a text message) and use it at sign-in. Backup codes cover a lost phone. Lost your two-step device?
When an organization accepts Microsoft MFA instead
An organization’s Owner can choose to let Microsoft’s multi-factor authentication stand in for the Rogue Productions code for its members. We only accept it when all of these are true:
- the sign-in is with a work account in that organization, and the Owner turned the option on (it is off by default);
- Microsoft’s signed response to our own sign-in request says multi-factor authentication was completed — we never accept a claim passed along by anyone else;
- that authentication happened in the last few minutes.
Personal accounts and individuals always use the Rogue Productions code.
Conditional Access
Conditional Access is how organizations set rules like “require MFA”, “only from company devices” or “block risky sign-ins”. When you sign in with a work account, your organization’s policies apply at Microsoft — including any that target “Rogue Productions” specifically. If a policy blocks you, you’ll see an explanation page; only your IT administrator can change the policy.
| Your organization requires… | What you’ll see |
|---|---|
| Multi-factor authentication | Microsoft’s prompt, then our two-step code (unless your organization accepts Microsoft MFA) |
| A compliant or company device | Sign-in works on those devices and is blocked elsewhere |
| Re-sign-in every few hours (“sign-in frequency”) | Occasionally, Microsoft asks you to sign in again while you’re using Rogue Productions |
| Access only from certain places | Sign-in blocked outside them |
The hourly check
While you’re signed in with Microsoft, we check with Microsoft about once an hour — every 15 or 30 minutes if your organization chooses. Microsoft applies your organization’s current rules to that check, so if your account is disabled, your access is removed, or your organization wants you to sign in again, Rogue Productions knows within that window. When Microsoft only wants you to sign in again, we take you straight there and back; we only end your session when Microsoft says you’re no longer allowed in.
If Microsoft itself is briefly unavailable, we give your session a short grace period rather than signing you out.
Seeing and ending your sessions
Security lists every device signed in to your Rogue Productions account and how each one signed in (password or Microsoft). You can sign any of them out.
Still stuck? Contact Rogue Productions support — include the “Reference” shown on any sign-in error page. This guide describes how sign-in works today; it is updated with every change to it.