Microsoft Authenticator App says Denied when I Approve the authentication request

Question

Microsoft Authenticator App says Denied when I Approve the authentication request

Ondrej A 31

Hello, trying to set Microsoft Authenticator app for MFA on Azure work account. Going through steps (Add account -> work/ school -> scan QR -> try it). When I reach the "try it" step, it sends authentication request to App on my smartphone. I click "Approve" but it sais "Denied" and also on the "Try it" page it shows alert that It sent me a request but I denied it which is not true.
Tried to reinstall the app, clear cache, remove storage data, but still the same.
Then I click "Enter code instead" went through steps (Add account -> other-> scan QR -> enter code). This works. In mysignins.microsoft.com/security-info shows "Authenticator App" instead of "Microsoft Authenticator".
Ok this works but I need to enter 6 digit code instead of just clicking on approve in the app. Any advices please?

Correlation ID:444e6646-ad47-4a47-a20c-f6b534189bef. Timestamp:2022-12-06T10:44:24Z

Alex Luhn 5 Reputation points

2023-01-11T21:17:38.63+00:00

Exactly the same is happening for me. Selecting 'approve' always returns as 'denied'.

Codes work.

Very annoying!!!
Racey Cave 5 Reputation points

2024-01-08T20:29:46.5633333+00:00

Yep, saaame issue here. Doesn't matter how many times you enter the code and hit 'yes' to approve it just says you denied it over and over and over and over and over.

If you're going to force this garbage on people whether they want it or not at least make it work. It's annoying to use unique 15+ randomized character string passwords for every account but still be forced into an app or some other text verification (which opens me up to SIM swapping) when I manage my own security just fine without big brother forcing me to do what they think is best and actually creating new security vulnerabilities where none existed prior. What a joke.
Siarhei Huryanau 5 Reputation points

2024-04-25T17:07:56.4366667+00:00

Temporarily disable the screen lock and try registering your device again. If you have a second device at home (for example a tablet), you can try adding it, because... MS allows you to add several devices ( then you can delete the unnecessary ones in your MS profile ).
Ondrej A 31 Reputation points

2024-05-03T09:38:06.7766667+00:00

@Siarhei Huryanau Yeah man this is workaround, ~~but acceptable and it works~~. -> this is basically that EZ suggested to do but it works only when you disable app lock which is however needed for password manager of Authenticator app so it is only half-solution

EDIT:
But man. This application sucks. Now it don't allow me to turn app lock (authenticator settings) on, so my password manager is not working. Lol this is ridiculous @microsoft_king_of_trolls
I enabled app lock for Authenticator in my device settings (not in Authenticator app) and it started working. I mean password manager started to work. I then again tried to sign-in in the service requiring MFA. I received the prompt in Authenticator, typed the correct number, approved the prompt and it again showed me that I

DENIED IT!!!

So basically Microsoft made an authentication app for MFA to enhance security and if you want to enhance it more by adding a App lock so not anybody can step into the MFA app and approve prompts or see your passwords than this app basically don't work. This is joke.
Dhruv Yadav 0 Reputation points

2024-08-18T09:06:23.3733333+00:00

disable the app lock and the phone lock and then try again. that worked for me. app lock may or may not be disabled for microsoft authenticator i think thats a bug as well but disable the phone lock and try again.
Noora 0 Reputation points

2024-10-01T08:53:41.0033333+00:00

I had the same problem, and thanks to this page I've sorted it. I had a pattern lock on my old device and never had this issue. Due to my phone breaking I had to start using an older tablet and thought maybe the problem was that it's on Android 10. I repeatedly got the same 'Denied' message after entering the code, so as advised on this forum I tried to disable the App Lock. I couldn't do it in the app before disabling device PIN completely. However, after disabling that I was able to get the Authenticator to approve access. And, I've now changed my device to use a Pattern screen lock. The App Lock on the Authenticator remains disabled, and I am able to use the app.

3 answers

Your answer

Alex Luhn 5 Reputation points

2023-01-11T21:17:38.63+00:00

Exactly the same is happening for me. Selecting 'approve' always returns as 'denied'.

Codes work.

Very annoying!!!
Racey Cave 5 Reputation points

2024-01-08T20:29:46.5633333+00:00

Yep, saaame issue here. Doesn't matter how many times you enter the code and hit 'yes' to approve it just says you denied it over and over and over and over and over.

If you're going to force this garbage on people whether they want it or not at least make it work. It's annoying to use unique 15+ randomized character string passwords for every account but still be forced into an app or some other text verification (which opens me up to SIM swapping) when I manage my own security just fine without big brother forcing me to do what they think is best and actually creating new security vulnerabilities where none existed prior. What a joke.
Siarhei Huryanau 5 Reputation points

2024-04-25T17:07:56.4366667+00:00

Temporarily disable the screen lock and try registering your device again. If you have a second device at home (for example a tablet), you can try adding it, because... MS allows you to add several devices ( then you can delete the unnecessary ones in your MS profile ).
Ondrej A 31 Reputation points

2024-05-03T09:38:06.7766667+00:00

@Siarhei Huryanau Yeah man this is workaround, ~~but acceptable and it works~~. -> this is basically that EZ suggested to do but it works only when you disable app lock which is however needed for password manager of Authenticator app so it is only half-solution

EDIT:
But man. This application sucks. Now it don't allow me to turn app lock (authenticator settings) on, so my password manager is not working. Lol this is ridiculous @microsoft_king_of_trolls
I enabled app lock for Authenticator in my device settings (not in Authenticator app) and it started working. I mean password manager started to work. I then again tried to sign-in in the service requiring MFA. I received the prompt in Authenticator, typed the correct number, approved the prompt and it again showed me that I

DENIED IT!!!

So basically Microsoft made an authentication app for MFA to enhance security and if you want to enhance it more by adding a App lock so not anybody can step into the MFA app and approve prompts or see your passwords than this app basically don't work. This is joke.
Dhruv Yadav 0 Reputation points

2024-08-18T09:06:23.3733333+00:00

disable the app lock and the phone lock and then try again. that worked for me. app lock may or may not be disabled for microsoft authenticator i think thats a bug as well but disable the phone lock and try again.
Noora 0 Reputation points

2024-10-01T08:53:41.0033333+00:00

I had the same problem, and thanks to this page I've sorted it. I had a pattern lock on my old device and never had this issue. Due to my phone breaking I had to start using an older tablet and thought maybe the problem was that it's on Android 10. I repeatedly got the same 'Denied' message after entering the code, so as advised on this forum I tried to disable the App Lock. I couldn't do it in the app before disabling device PIN completely. However, after disabling that I was able to get the Authenticator to approve access. And, I've now changed my device to use a Pattern screen lock. The App Lock on the Authenticator remains disabled, and I am able to use the app.

Answer 1

EZ 20

I had exactly the same issue (Selecting 'approve' on the app popup - always returned 'denied'.)
The problem was witnessed in android Microsoft Authenticator (v 6.2212.8187)

The solution (for me) was to DISABLE the "App Lock" feature of Microsoft Authenticator. This feature basically asks the device unlock password every-time you "open the app, approve a notification or autofill on sites and apps".
So it would seem, for whatever reason, the app is unable to show both the approval popup and the device unlock password "window" (at the same time). The device unlock password is never shown, hence the approval is denied.
I'll continue to investigate for a "better" solution, but for now, I can verify that disabling "App Lock" feature works for me.

The feature can be disabled/enabled in Microsoft Authenticator -> three dots (top right corner) -> Settings -> Security -> "App Lock" (On/Off)

Ondrej A 31 Reputation points

2023-02-01T08:16:38.8666667+00:00

I confirm that disabling App Lock "solved" problem with receiving Deny when clicking on Approve button.
Reenabling App Lock will bring the problem back.

Can't accept as ultimate solution because without App Lock some functionalities of MS Authenticator App are not working (e.g. Password Manager :/)

But perfect for somebody who only use this app for MFA and don't want always open the app select account and manually enter 6 digit code to authenticate.
Ondrej A 31 Reputation points

2023-03-08T05:16:32.0033333+00:00

I was living some time with App Lock disabled because I know most of my passwords so don't use password manager regularly. But one day I turned App Lock on and from that point I'm not able to turn it off. When I try it in settings it immediately turn back on. Seems I'm kind of attracting problems person.
Ashwathy G L 0 Reputation points

2023-03-10T04:40:34.29+00:00

I’m also facing the same issue but when try to disable the applock it’s automatically gets enable, is anyother way to solve this issue
Ondrej A 31 Reputation points

2023-03-10T05:00:05.2433333+00:00

@Ashwathy G L So I'm not the only one who have a problem with App Lock reenabling after disabling in settings :( Currently I do not have any solution for this.
EZ 20 Reputation points

2023-03-16T09:31:02.37+00:00

I also faced that issue (I turned App Lock on and I was unable to turn it back off). If I remember correctly, my solution was to (temporarily) remove the phone's screen lock completely (Settings-> passwords & security), uninstall then reinstall the Authenticator App (with App Lock off) and lastly re-enable the android phone’s screen lock feature.
Joe Kobier 5 Reputation points

2023-08-16T09:02:25.67+00:00

Wow! This is a real problem - we want to roll out Authenticator to 200+ staff, many of whom have this issue with Android vs Authenticator. Surely there is a better way to resolve this issue?

Does anyone have any suggestions?
Ondrej A 31 Reputation points

2023-08-16T09:53:39.0966667+00:00

It would be perfect if anybody from MS look on this issue. It is ridiculous that users have to search for solutions for such problems themself. Maybe there is some incompatibility in Android version and application, or there are some device settings causing this but how could simple user find out what is the problem?

It seems that this is only users platform and nobody from MS support looks here. I already tried to bring some attention on this thread by writing on MS support or app review in store but it seems that without any success.
ALETI, VEERA TEJA BHASKAR 0 Reputation points

2023-11-17T02:05:34.86+00:00

Solution for App lock unable to turn it off. Uninstall the authenticator app > disable your mobile password (wheather screen lock, password etc) > install authenticator app > configure now. It wil work.
Racey Cave 5 Reputation points

2024-01-08T20:31:44.32+00:00

When I hit the slider to turn off App Lock it just turns right back on again no matter how many times you try to disable it.

Hey MSFT - your app is BROKEN. FIX IT.
KAVISHKA RASANJANA LANKAGEEGANAGE LANKAGEEGANAGE 0 Reputation points

2024-04-03T07:07:15.0566667+00:00

Yeah! That worked. Thanks!

Answer 2

Ajay Yadav 10

Microsoft Authenticator App says Denied when I Approve the authentication request- What i have done i removed the all lock pattern from my mobile and it start working properly for me.

Racey Cave 5 Reputation points

2024-01-08T20:31:03.92+00:00

So we need to go through and rearrange the security measures on the device itself for their new 'security measure' to function properly?

That's not a solution, and even as a work around that's pretty terrible.
Dhruv Yadav 0 Reputation points

2024-08-18T09:06:56.07+00:00

yeah thanks for the trick it worked.

Answer 3

Ondrej A 31

I finally changed the device and now it is working. But it's quite a shame that there wasn't any relevant response from responsibles since Dec/2022. Even response of type "Hey man you have device with old android and we do not support it anymore." would be acceptable answer I think.

Share via

Microsoft Authenticator App says Denied when I Approve the authentication request

DENIED IT!!!

3 answers

Your answer