@Richard Berry, Thanks for posting in Q&A. It seems that you are encountering an error when trying to enable passwordless phone sign-in with Microsoft Authenticator. According to Microsoft's documentation, there are a few known issues that might be causing this error. Here are some steps you can take to try and resolve the issue:
- Check if the user is allowed to use phone sign-in. If the user is not allowed by policy to use phone sign-in, they will not be able to enable it within Microsoft Authenticator.
- Check if the user has fulfilled all the prerequisites required for passwordless phone sign-in. Some of the requirements include having the latest version of Microsoft Authenticator installed on devices running iOS or Android, and having Azure AD Multi-Factor Authentication enabled with push notifications allowed as a verification method.
- Check if the user has completed all the necessary steps to register for phone sign-in with Microsoft Authenticator. This includes acquiring a Temporary Access Pass and following the instructions in Microsoft Authenticator to finish registering the account for passwordless phone sign-in.
- Check if the user has encountered an unresolved verification request. In one scenario, a user can have an unanswered passwordless phone sign-in verification that is pending. If the user attempts to sign in again, they might only see the option to enter a password. To resolve this scenario, the user should open Microsoft Authenticator and respond to any notification prompts.
If none of the above steps help resolve the issue, I recommend open case to help troubleshoot and resolve any issues with passwordless sign-in using Microsoft Authenticator.
References:
- Enable passwordless sign-in with Microsoft Authenticator - Known Issues: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-phone#known-issues
- Enable passwordless sign-in with Microsoft Authenticator - User Registration: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-phone#user-registration
- Enable passwordless sign-in with Microsoft Authenticator - Prerequisites: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-phone#prerequisites
- Enable passwordless sign-in with Microsoft Authenticator - Sign In with Passwordless Credential: https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-phone#sign-in-with-passwordless-credential
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.