Software OATH tokens unavailable after migration from legacy authentication methods policies

Question

When I used instructions from How to migrate MFA and SSPR policy settings to the Authentication methods policy for Microsoft Entra ID and set Migration status in Entra ID - Protection - Authentication methods | Policies to the "Complete" status, the verification codes method became unavailable as authentication method.

Before migration

When migration status is set to "Migration in progress" the "Use a verification code" is available to verify my identity on logging into Azure Portal.

After migration

Set migration status to "Complete", legacy policies are now ignored.

"Use a verification code" is now unavailable.

My settings on the Policies page:

Answer 1

Hello @Maksym Dilanian,

Thank you for posting your query on Microsoft Q&A.

Based on your description, I understand that after migrating from legacy authentication methods to modern ones, you were unable to use the TOTP method, as the "Use a verification code" option is missing from the MFA prompt page.

This issue could occur if the "Allow use of Microsoft Authenticator OTP" option is not enabled in your modern authentication method policies. To enable it, please follow these steps:

1. Log in to the Azure portal.
2. Navigate to Microsoft Entra ID > Security > Authentication methods.
3. Under Authentication method policies, click on Microsoft Authenticator Settings.
4. Click Configure.
5. Ensure that the option "Allow use of Microsoft Authenticator OTP" is enabled.

Please refer to the screenshot below for better understanding.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.