I absolutely hate Microsoft authenticator. Why does it need its own app? Google Authenticator, Auth Apple Passwords, freaking Aegis, everything works with TOTP and piece of shit Microsoft has to go off and do its own thing like that nonsense Duo.
You can actually use an alternative authenticator app for Microsoft logins. I use Aegis on my phone for it.
They don't make it clear in the messaging during the sign-up flow, which just says Microsoft Authenticator everywhere. But when you proceed through the steps to get a TOTP code for Microsoft Authenticator, there's a step with a link to something like "I want to use an another authenticor app", which presents a QR code for any generic TOTP app.
I've done this as well. My employers setup guide was super long winded and tried hard to suggest MS Authenticator was the only one that would work without outright saying it.
However, I've gathered that this is a setting that is up to the organization so your YMMV. Since some employees work at secure sites without wifi/mobile connections they aren't able to turn off TOTP.
