How to change 2FA for Guest accounts

Question

I have a new mobile device and I now want to switch the MS Authentication to the new device.

I was unable to find out how to switch the 2FA for the Guest accounts. I can login using the MS Authenticator app (e.g. to Azure using my old mobile device) using the guest account, but as soon as I go to "View account" it uses my normal account linked with the foreign guest account for the Security settings, making it impossible to change 2FA for the Guest Accounts.

The external account is marked as ...#EXT#@organization.onmicrosoft.com within the MS Authenticator App. How do you change 2FA for these accounts?

A direct login to the account (login.microsoftonline.com) is also not possible, as I have never set a password for this account, I always use the account, which is linked to this external account, not the external account itself.

Answer 1

Found it (sorry, screenshots are in german...):

In an incognito tab open https://aka.ms/mfasetup

Do not log in directly, rather go to "login options":

log on to an organization

type the org domain

(here's the interesting part) Log on, using your guest account in the org

On the folloing page you can modify the MFA settings, exactly like you would using a corporate account. Additionally, in the top right corner, when you hover over your image it shows your personal account logged in into the org.

I only whish this was documented somewhere. 🙄

Answer 2

Can you please elaborate or share error snapshot.

If you need to manage MFA settings for specific guest accounts, you can do this on an individual basis.

• In the Azure AD section, go to "Users" > "All users."
• Search for and select the specific guest user account.
• Navigate to the "Authentication methods" tab for the user, where you can manage MFA settings.

------------If you find this answer helpful , Kindly accept the answer ----------------