[SOLVED] Microsoft Authenticator, transfer accounts to a new phone (iOS)

Question

Good day!

We have deployed 2FA using Microsoft Authenticator in our tenant. I have several accounts which are in the account list. Unfortunately, Microsoft Authenticator, as of now, only allows iCloud backup to a personal iCloud account which we do not have.

For example, Google Authenticator allows easy export of accounts to a new device. What is the proposed solution for Microsoft? And what happens if I lose or my phone or it is damaged?

Phone - iPhone 7 Plus, iOS 15.7.3

Authenticator - 6.7.5

Thanks!

Answer 1

If you are the only global admin on the account and are blocked entirely, you can reach out to the Azure Data Protection team to restore access. 866-807-5850

Also you can create an emergency access account in Azure AD. This account will help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in for any reason.

https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access

other contact options are;

AzureSupport

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

azcommunity@microsoft.com

-

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Currently that's the only backup method. https://support.microsoft.com/en-us/account-billing/back-up-and-recover-account-credentials-in-the-authenticator-app-bb939936-7a8d-4e88-bc43-49bc1a700a40

Without a backup to restore from the only option is to work with each of the service provider's account recovery methods. The authenticator app is nothing more than a code generator. The two factor is turned on or off at the service provider end.

-

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Dave,

The authenticator app is nothing more than a code generator.

Unfortunately, we use Microsoft Authenticator to approve log-in requests for Microsoft provided services.

https://support.microsoft.com/en-us/topic/use-microsoft-authenticator-with-microsoft-365-1412611f-ad8d-43ab-807c-7965e5155411

I am concerned about the recovery if the phone is damaged/reset/lost and I am the only user with admin rights.