Azure reset MFA not working

t4t 1 Reputation point
2022-12-19T09:53:06.607+00:00

We have an account signed in to Azure that deleted their account from Microsoft Authenticator. Now when trying to access Azure portal they are prompted for a code from the authenticator but they cannot provide it. We tried clicking on "Require re-register multifactor authentication" and also "Revoke multifactor authenticator sessions" but they are still prompted for a code through the app.

We have tried to enable an SMS or Email options for getting the code but these do not seem to work either.

Microsoft Security Microsoft Entra Microsoft Entra ID
Microsoft Security Microsoft Authenticator
{count} votes

1 answer

Sort by: Most helpful
  1. JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator
    2022-12-20T23:50:59.43+00:00

    @t4t
    Thank you for your post!

    I understand that you have a user that deleted their account from the Microsoft Authenticator app, and when trying to login to the Azure Portal they're prompted for a code from the app that they can't provide. I noticed that you also mentioned enabling SMS or Email options to receive the code for MFA didn't work either, so I'll share some more options to hopefully point you in the right direction.

    Use a different verification option:

    1) Because the user can't access the Authenticator App to verify their identity using the code generated, they should be able to select Use a different verification option.
    2) The user can now verify their identity via Email, Phone/Text, or Authenticator App. If the user doesn't have access to any of these options or if they never set this up, if you have other user's within your tenant, you should be able to Add authentication methods for the user, so they can login using these other methods.

    272610-image.png

    • If your organization has MFA enabled via Conditional Access Policies, you can exclude the user from the policy so they don't have to perform MFA, and re-add them once they sign-in.
    • If Security Defaults is enabled within your tenant and the user is an Admin, you can remove their role assignment to hopefully exclude them from MFA and re-add it once they sign-in.

    If none of these options work to resolve the user's issue, they'll have to reach out to our Global Customer Service phone number(s) so their team can look into the issue and unlock the user. Optionally, they can try reaching out to our Azure Data Protection team for further assistance - (866-807-5850).

    I hope this helps!

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.


    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.