@t4t
Thank you for your post!
I understand that you have a user that deleted their account from the Microsoft Authenticator app, and when trying to login to the Azure Portal they're prompted for a code from the app that they can't provide. I noticed that you also mentioned enabling SMS or Email options to receive the code for MFA didn't work either, so I'll share some more options to hopefully point you in the right direction.
Use a different verification option:
1) Because the user can't access the Authenticator App to verify their identity
using the code generated, they should be able to select Use a different verification option
.
2) The user can now verify their identity via Email
, Phone/Text
, or Authenticator App
. If the user doesn't have access to any of these options or if they never set this up, if you have other user's within your tenant, you should be able to Add authentication methods for the user, so they can login using these other methods.
- If your organization has MFA enabled via Conditional Access Policies, you can exclude the user from the policy so they don't have to perform MFA, and re-add them once they sign-in.
- If Security Defaults is enabled within your tenant and the user is an Admin, you can remove their role assignment to hopefully exclude them from MFA and re-add it once they sign-in.
If none of these options work to resolve the user's issue, they'll have to reach out to our Global Customer Service phone number(s) so their team can look into the issue and unlock the user. Optionally, they can try reaching out to our Azure Data Protection team for further assistance - (866-807-5850).
I hope this helps!
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.