In another episode of "Our security is bad, but don't let it show", an internal Microsoft memo has leaked announcing changes to valid login methods for Chinese employees. Starting in September, they will only be able to verify their identities using the Microsoft Authenticator manager and the Identity Pass app on Apple devices, in an attempt to avoid the chaos of digital stores for Android in China, and consolidate its security strategy.
We all know that Android's operation can change greatly depending on the region, and the prime example is China: Google services are not available there, which affects compatibility of a huge number of applications, including those Microsoft uses to validate identity of its employees in that country. So what's the solution? If we go by an internal memo that Bloomberg obtained, it's to ban Android devices and order their replacement with iPhones.
Microsoft Gives Android the Thumbs Down in China
Starting in September, the only authorized way to log in will be with Identity Pass and Microsoft Authenticator on iOS devices. Those using Android smartphones (especially brands like Xiaomi and Huawei) will be able to purchase an iPhone 15 once, with availability at multiple distribution centers throughout the territory, including Hong Kong (where Google services still work).
The technical reasons are certainly valid: the gap between Chinese authorities and international digital stores keeps widening, and Redmond's strategy seems more reasonable than redesigning its apps to adapt to each local store and each OEM. But at the same time, Microsoft needs to improve its entire security profile: it is still picking up the pieces after the cyberattack it suffered last January at the hands of Midnight Blizzard / Cozy Bear (a group linked to Russia), which affected several clients, including US government agencies.
Sources: Bloomberg (paywall), Apple Insider
