Users receive error in Authenticator

IT Lead 30 Reputation points
2025-11-14T03:07:09.1166667+00:00

I have 3 users that are receiving the error below when trying to authenticate their email for our tenant. These emails are indeed for our domain. The error displays after the screen labeled, "Let's keep your accounts secure", and user clicks the Next button. Each email has no authentication method registered at this time. Please assist!

User's image

Moved from: Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other

Answer accepted by question author
Tamara-Hu 17,960 Reputation points Microsoft External Staff Moderator
2025-11-14T10:36:38.98+00:00

Hello @IT Lead,  

Good day! Thank you for posting your valuable question on Microsoft Q&A forum.   

The error message: 

Contact your admin  "You are required to register an authentication method to continue but none have been enabled for this account. Contact your admin for help." 

This typically occurs in Microsoft 365/Azure AD when Security Defaults or Conditional Access policies require Multi-Factor Authentication (MFA), but the affected accounts have no authentication methods configured and no option to register them because the admin hasn't allowed self-service registration. 

You need to enable registration for authentication methods:

Verify Security Defaults Status 

If Security Defaults are enabled in your tenant, MFA is enforced for all users, and they should be able to register authentication methods during sign-in.  

  • Go to Microsoft Entra admin center: https://entra.microsoft.com/  > Entra ID > Overview >  Properties. 
  • Check if Security Defaults are enabled. 
  • If Security Defaults are ON and they still see the error, temporarily disable Security Defaults, allow them to sign in and register, then re-enable Security Defaults. 

User's image

If your organization use Conditional Access instead of Security Defaults, please process to the next steps. 

Enable MFA registration 

  • Go to Microsoft Entra admin center> Entra ID  > Authentication methods. 
  • Under Policies, ensure Microsoft Authenticator or other methods are enabled for the users: 
    • If the Target is All users, then process to the next steps. 
    • If not, please check if the Target users/groups contain the three users. 
    • Ensure the Enable status is Yes.

User's image

Manually add methods 

  • In Microsoft Entra admin center > Entra ID > Users > Select the user > Authentication methods > Add a phone number or email manually. 

User's image

  • Alternatively, you can ask the users to download the Authenticator app and manually add their accounts from there. 

Please let me know if you need any further assistance or clarifications on any steps. Thank you for reaching out to us! 


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

2 people found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.