Is MS Authenticator for Android bond to tenant or registered accounts?

Question

Goodmorning everyone, I state that I am a rookie of the Azure AD administration and English is not my mother tongue but, I hope to be able to correctly expose my question and get an answer.

Subject: Authenticator app for Android

Starting condition Authenticator registered in tenat # 1 (MS 365 business)

Evolution # 1
At Authenticator I add accounts of a new tenat 365 business.

Evolution # 2
Configure Backup Authenticator Credentials

Evolution # 3
I delete Authenticator from tenant # 1 and close the subscription.

Final condition / question
Having started using Autheniticator with Tenant # 1 and starting the backup of credentials when Authenticator was registered on two Tenants; now that tenant # 1 has been closed, when will I need to retrieve the credentials from the backup, will I have problems?

Answer 1

Hey @DrugoBot

I'll assume by Authenticator app we are talking about the Microsoft Authenticator application found in the Google Play-store.

Now you've registered MFA in Tenant #1, and for the example let's say Bob has registered Bob.Wood@tenant1.onmicrosoft.com on his Android Phone.

And you @DrugoBot have made Tenant #2 and here Bob will need to configure his Multi-Factor Authentication again.

My second assumption is that Bob will get a new User Account in Tenant #2 and as such he will be asked to register Multi-Factor Authentication options, and he chooses Microsoft Authenticator from the Google Play-store.

Now Bob will have two identities in his Microsoft authenticator application on his Android phone.

To illustrate it will be like this:

Hope this helps

Best regards,
Ulv

Answer 2

The Backup functionality is currently tied in to Personal (MicrosoftID) account, so it doesnt relate to any Azure AD tenant. If you are using iOS device, you can also use an iCloud account.

In any case if the backup account is deleted, you will loose any stored data and you will have to manually recreate it. Also note that recovering from backup doesnt automatically and immediately allow you to use the app with the recovered account(s), you still need to go through a confirmation/verification process. Check the official documentation for more details: https://learn.microsoft.com/en-us/azure/active-directory/user-help/user-help-auth-app-backup-recovery