Azure locked out after enabled CA with Authenticator for all users

Loop 0

Hello,

We have created an Azure tenant to test conditional access. I registered a new policy that enables the authentication strength of conditional access with Authenticator for all cloud applications but when I try to connect, I get this message “Additional connection methods are required to access this resource. Contact your administrator to enable these methods". The problem is that I've enabled this policy for all users, including the administrator. So we're blocked, but I don't understand why when I ask to connect, the page doesn't ask me to open Authenticator, why this method isn't activated by default when we choose it, it's weird. Have I forgotten to configure something? And what's my solution for reconnecting? (We forgot to create an break glass account).

Paroksh 0 Reputation points

2024-06-06T09:11:18.1266667+00:00

If you're locked out of your Azure environment after enabling Conditional Access with Authenticator for all users, follow these steps:

Global Administrator Account: Use a Global Administrator account not affected by the policy to modify or disable it.

Break Glass Account: Log in with a break glass account (Global Administrator excluded from Conditional Access policies) to make changes.

PowerShell or Azure CLI: If the portal is inaccessible, use PowerShell or Azure CLI to disable the Conditional Access policy.

Share via

Azure locked out after enabled CA with Authenticator for all users