Getting error when trying to set up Azure Multi-Factor Authentication for Azure Portal

Question

Hello All,

Am trying to enable MFA for my Azure portal username but facing issue while doing that.

Steps follow during process:

1. Open Link "https://portal.azure.com"
2. Ask to enter user Id and temp password which I received for newly generated account.
3. Ask for more information from organization
4. Ask to install Microsoft Authenticator App and scan the QR code. But after I scan the QR code on mobile I get the below error.
   "Unable to add the account:
   We couldn’t add the account. Please verify that the activation code is correct and push notification are enable on your device for this app."
   First thought it might be device issue but tried with other devices as well but same error.

Tried deleting and recreating account but still the same issue.
Any suggestion will be appreciated.

Thanks.

Answer 1

Hello @Manoj Usapkar - Thanks for reaching out and sorry to hear that you are having issues.

I have reproduced the scenario and found no issues while adding the account.

Can you check if your user account is blocked from using Azure Multi-Factor Authentication.

Under User Administration, go to Block/Unblock Users.

Check whether the user is blocked.

If the user is blocked, select Block Reason, and then take appropriate action. To unblock the user, click Unblock in the Action column.

Answer 2

Within our company we had the same issue. The issue was being caused with our users going through our proxy/firewall server. Once we allowed the below URLs through our network issue was resolved.

https://mobileappcommunicator.auth.microsoft.com

https://mobileappcommunicator.auth.microsoft.com/activate

We tested this with by putting one of our mobile devices onto our network error would appear. Once we had taken the mobile off our network MFA worked.

Our MFA policy was setup and being pushed our with conditional access.

Answer 3

Hello, when I try to add my account, I get an error message saying "The account you are trying to add is not valid at this time. Contact your administrator to resolve this issue (uniqueness validation)." What should I do?

PS: User not blocked

Answer 4

Do below steps on the device, solved the issue for me:

Navigate to Settings -> Security and privacy -> Other security settings -> Device admin apps -> Unselect Authenticator.

Then turn the notifications OFF and then ON for the MS authenticator app.