Microsoft authenticator External organization (after phone reset or lost)

Question

Hello,

I recently lost my phone and now that I have a new one, I need to connect to an external organisation attach to my company microsoft account. The problem is that I have no longer the entry for this external organisation in my authenticator app.

I try to remove the guest account first from https://myaccount.microsoft.com/organizations but I can't remove the guest account because I don't receive any notification on my authenticator app.

I asked the guys from the external organisation to re invite me. I also can't join. I don't receive any notification on my authenticator app.

But the app still seems to work, from https://mysignins.microsoft.com/security-info when I remove the authentication by the application and add it again, I receive the notification correctly.

Anyways I always had this kind of problem with this crap of microsoft-authenticator app and external organization.

Answer 1

Hi @Girod Luc Hervé

Thank you for asking this question on the **Microsoft Q&A Platform. **

You will require that the Azure AD External organization "Reset your MFA"

I have provided the steps below to reset and unblock MFA in Azure Active Directory via Azure Portal and PowerShell.

Using Azure Portal:

• Sign in to the Azure portal with the tenant Global Administrator account.
• Navigate to Azure Active Directory > Users > All users > Choose the user you wish to perform an action on >** select Authentication methods** > Require Re-register MFA.
• Once this is done, the next time the user signs in, he/she will be requested to set up a new MFA authentication method.

Note: The user's currently registered authentication methods aren't deleted when an admin requires re-registration for MFA. After a user re-registers for MFA, we recommend they review their security info and delete any previously registered authentication methods that are no longer usable.

Using PowerShell:

• Install the MSOnline PowerShell module.
• Run Connect-MSOLService and sign in with the Global Administrator account.
• Run Set-MsolUser -UserPrincipalName John.dave@contoso.com -StrongAuthenticationMethods @() cmdlet to reset the MFA registration information.

Read More: Manage user authentication methods for Azure AD Multi-Factor Authentication

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

---