Remove Microsoft Authenticator App Authentication Method

Question

Remove Microsoft Authenticator App Authentication Method

Azure CloudNetTech 20

Hi,

Need to remove Authenticator App as an authentication method and add SMS an an MFA method.

Cannot see Authentication methods | Policies in Directory (Azure B2C) as we see in the Default Directory.

Scenario:

We had a Default Directory. We created a new Azure B2C Directory. Moved Azure Subscription into the New Directory. Now when we switch to new Directory Microsoft Authenticator App notfication pops up. We configured the Authenticator App. But now we want to remove Authenticator App and use SMS on mobile to login for MFA.

Please suggest.

Thanks.

Raja Pothuraju 21,120 Reputation points Microsoft External Staff

2025-03-24T15:08:17.2966667+00:00
Hello @Azure CloudNetTech,

Based on your description, I understand that you want to add SMS as an MFA method for your user account in Azure AD B2C. However, when you checked the registered authentication methods in the Azure Portal, no methods were displayed. Please refer to the screenshot below to ensure we're on the same page.

It appears that you logged into the Azure Portal with the same account (User A) where you were trying to add an additional authentication method (SMS). This behavior is expected—when managing authentication methods via the Azure Portal, you can add them for all users in the tenant except your own account (User A).

To add SMS as an authentication method for your account, you can either:

Ask another Global Administrator to add the SMS authentication method for you.

Register the MFA method yourself by logging into:

My Security Info: https://mysignins.microsoft.com/security-info

MFA Setup: http://aka.ms/mfasetup?tenantID=<tenant_ID> (Replace <tenant_ID> with your actual tenant ID).

If this is not the scenario to you, please let me know we can take this up offline to see the behavior of it.

I hope this information is helpful. Please feel free to reach out if you have any further questions.
Azure CloudNetTech 20 Reputation points

2025-03-25T11:32:16.96+00:00

We logged in as another Global Admin and added Phone Number authentication method and removed Microsoft Authenticator App from User Authentication Methods. It worked once only then again its asking for registering for Authenticator App. We have also disabled Security Defaults as well.
Raja Pothuraju 21,120 Reputation points Microsoft External Staff

2025-03-26T12:46:59.21+00:00

Hello @Azure CloudNetTech,

Thank you for your response.

I would like to take this troubleshooting offline to understand the behavior of it. I have sent you a private message, please check and share the required details to connect with you over team's call.

1 answer

Your answer

Raja Pothuraju 21,120 Reputation points Microsoft External Staff

2025-03-24T15:08:17.2966667+00:00

Hello @Azure CloudNetTech,

Based on your description, I understand that you want to add SMS as an MFA method for your user account in Azure AD B2C. However, when you checked the registered authentication methods in the Azure Portal, no methods were displayed. Please refer to the screenshot below to ensure we're on the same page.

It appears that you logged into the Azure Portal with the same account (User A) where you were trying to add an additional authentication method (SMS). This behavior is expected—when managing authentication methods via the Azure Portal, you can add them for all users in the tenant except your own account (User A).

To add SMS as an authentication method for your account, you can either:

Ask another Global Administrator to add the SMS authentication method for you.

Register the MFA method yourself by logging into:

My Security Info: https://mysignins.microsoft.com/security-info

MFA Setup: http://aka.ms/mfasetup?tenantID=<tenant_ID> (Replace <tenant_ID> with your actual tenant ID).

If this is not the scenario to you, please let me know we can take this up offline to see the behavior of it.

I hope this information is helpful. Please feel free to reach out if you have any further questions.
Azure CloudNetTech 20 Reputation points

2025-03-25T11:32:16.96+00:00

We logged in as another Global Admin and added Phone Number authentication method and removed Microsoft Authenticator App from User Authentication Methods. It worked once only then again its asking for registering for Authenticator App. We have also disabled Security Defaults as well.
Raja Pothuraju 21,120 Reputation points Microsoft External Staff

2025-03-26T12:46:59.21+00:00

Hello @Azure CloudNetTech,

Thank you for your response.

I would like to take this troubleshooting offline to understand the behavior of it. I have sent you a private message, please check and share the required details to connect with you over team's call.

Answer 1

Hello @Azure CloudNetTech,

Thank you for your time over the call.

As we discussed, we observed that when you log in to the Azure portal using your username, password, and SMS authentication method, you are prompted to register a new authentication method with the Microsoft Authenticator app—even though you have already registered SMS authentication for your user account in your Azure AD B2C tenant.

Through our troubleshooting, we identified that SMS authentication was not enabled in your Azure AD B2C tenant. As a result, the system did not recognize the registered SMS method during login, since it was disabled by policy. This is why the SMS method appeared under non-usable authentication methods in the user's authentication settings.

To resolve this, we enabled the SMS authentication policy in your Azure AD B2C tenant. After making this change, you are now able to log in successfully without being prompted to register the Microsoft Authenticator app.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Share via

Remove Microsoft Authenticator App Authentication Method

1 answer

Your answer