Unable to complete phone sign in method

Question

Cannot complete this method in the authenticator app on Android. Two cases open on this issue. One with Office 365 at #‎2408091420000331 and one at Entra support with 2408090050001537. Android device shows as a registered device in Entra.

Answer 1

Hello @Mariëtte Knap [server-essentials.com],

Thank you for posting your query on Microsoft Q&A and for sharing the support ticket numbers as well.

Based on your description, I understand that you are encountering an issue when attempting to enable phone sign-in with the Microsoft Authenticator app, where the setup fails.

After reviewing the case you raised with the Entra team (2408090050001537), I noticed that your tenant has Multi-Factor Authentication (MFA) enabled via per-user MFA, but the Microsoft Authenticator option hasn't been enabled in the Authentication Methods policy. To enable passwordless phone sign-in with the Authenticator app, you'll need to configure it through the Authentication Methods policy, as the AuthenticatorAppSignInPolicy isn't supported under the legacy per-user MFA settings.

To resolve this issue, please enable the Microsoft Authenticator via the Authentication Methods policy by following these steps:

1. Sign in to the Microsoft Entra admin center as at least an Authentication Policy Administrator.
2. Browse to Protection > Authentication methods > Policies.
3. Under Microsoft Authenticator, choose the following options:
   1. Enable - Choose Yes
   2. Target - All users or Select users
4. Each added group or user is enabled by default to use Microsoft Authenticator in both passwordless and push notification modes ("Any" mode).
5. To apply the new policy, click Save.

Once the policy is saved, users can then register themselves in the Microsoft Authenticator app to enable phone sign-in:

1. In Microsoft Authenticator, select the account registered.
2. Select Enable phone sign-in.
3. Follow the instructions in the app to finish registering the account for passwordless phone sign-in.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know. Thanks,
Raja Pothuraju.

Answer 2

I'm struggling to authenticate also. I tried to sign into my work email on the browser, it asks for a code from my app. But I can not set up the app, as when I try to sign into the app, it's asking me for a code from the authenticator app? I click other options and this is the only other option I get. I'm unsure how to get this to work