About a month ago I set up 2 USB-C security keys as my primary second factor for Apple authentication. On a new device, I would need one of the security keys in order to sign into my account, something which I tested and confirmed at home.<p>Some time passed, phone broke, and I went to Apple store to get a new one. They needed to adjust some stuff on "Find My" so they had me log into my account on one of their laptops in store. All I needed was my password... no security key.<p>How could this be? I just confirmed again that it is needed by going through the same journey at home on a personal device - security key needed to log into iCloud.<p>I must be missing something.
Apple Store can override security no problem.<p>MacBook remotely locked by an ex partner through a management profile? Take it to the Apple Store and they'll unlock it.<p>Inherited an Apple device and can produce the receipt? They'll remove it from the previous account.
my company has an inward sso process that uses kerberos and an 2fa enforced one for outside that is additionally limited in what it can grant access to.