In attachments you can see how it just switches between Teams and Authenticator app. Starting teams: Switches to authenticator app: Loads in Authenticator: Back to Teams: Back to authenticator again…. And then loops this. In logon logs in admin center, this user have logon alot of times in the same minute.
FBI Reform - fbireform.comFBI Reform - fbireform.com - The News And Times