25,234 questions
< Removed because I was trying to post a comment, not an answer, sorry >
Can't login to Azure portal after being forced to set up Microsoft Authenticator
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 74%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGD%3C/text%3E%3C/svg%3E)
Gerardo Delgado
0
Reputation points
When a user in the organization tried to login, he was asked (forced) to set up MFA through the Microsoft Authenticator. Followed the steps, scanned QR code and accepted the test approval request. After that, he's unable to login because he never gets the approval requests on the phone. (He's able to get approval requests for other accounts, but this one just refuses to work)
The option "Enter a security code from your Microsoft account or authenticator app instead." doesn't work either, as it always says that the code received wasn't the expected.
No other authentication options are available.
We've already tried forcing resetting it through Azure Portal > Users > Authentication methods > "Require re-register multifactor authentication" option, but after setting up the authenticator again, it still doesn't work.
After failing to login and clicking "Send another request to my Microsoft Authenticator app" we receive the following error:
Troubleshooting details clipboard:
Error Code: 50089
Request Id: 57075da4-0df4-418f-af1a-dad7b9422901
Correlation Id: 9e04b520-0f2a-4b66-9b29-353d68721af4
Timestamp: 2023-03-16T17:33:41Z
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Authenticator
9,396 questions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 1%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
Patchfox 4,176 Reputation points2023-03-16T20:40:25.1033333+00:00 Hi Gerardo Delgado, I want to assist you with this problem.
Could you send us the sign in logs shortly after you attempted another MFA
It could be that it is an Auth throttle problem.
-
Gerardo Delgado 0 Reputation points
2023-03-17T03:06:38.42+00:00 Hello @Patchfox thank you, we tried logging in again, but we never receive the MFA approval request in the phone and it seems that the loggin attempt does not register in the Sign-in logs section that you mentioned.
Also, I've noticed that with the Microsoft Authenticator app open, after clicking the "Approve a request on my Microsoft Authenticator app" button in the login page, a message appeared in the app, that says something like "An error has ocurred searching for an account to complete the multifactor authentication. It is possible that you will have to add the account again." (translated on my own, because it is not in Spanish...
This seems weird, I'm also thinking if it could be an issue due to the fact that the user belongs to two different directories with the same e-mail account. The login prompt comes from trying to access portal.azure.com. How does it know which directory we're trying to access? Could the issue be that it is trying to access the portal of the other directory, to which we have never set up MFA?
-
Gerardo Delgado 0 Reputation points
2023-03-17T03:07:46.7233333+00:00 @Patchfox quoting the previous message (sorry):
"Hi, is it possible to test the mfa with another method. Only for testing, to know if it's more user related."What do you mean to test the MFA with another method? How can we do that?
-
Patchfox 4,176 Reputation points
2023-03-17T14:31:00.1266667+00:00 Is it possible to reconfigure MFA and allow the user to use an additional MFA option to configure MFA like SMS or Phone?
Sign in to comment
1 answer
Sort by: Most helpful
-
Gerardo Delgado 0 Reputation points
2023-03-16T21:24:04.24+00:00 -
Patchfox 4,176 Reputation points
2023-03-16T21:43:07.09+00:00 Hi, is it possible to test the mfa with another method. Only for testing, to know if it's more user related.
Sign in to comment -