O365 MFA: “Sign in other way” not working for option Email.

Question

Hi,

We are using Microsoft 365 and Multifactor Factor Authentication to login in the Office 365 portal. We use Microsoft Authenticator App and an Email Address for MFA. Users MFA is configured in the users account in Security Info and is enabled in the Microsoft Admin Center.

When trying to use the secondary MFA option, Email Address, by selecting “Sign in another way” when logging in to the Office365 portal, you do not get the option to send a code to the Email Address.

You get only the options:
• Approve a request via Authenticator App or
• Use verification code from my mobile app

This means that when you are using MFA and you do not have your mobile phone, you cannot login. We don't know if we will use MFA in such a case.

Is this by design or am I configuring the MFA incorrect?

Mario

Answer 1

Hi @Mario onMicrosoft

I thought the same as you, but according to this documentation, the email address option is only used for SSPR.

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods#how-each-authentication-method-works

BR
Mela

Answer 2

Thanks Mela.
Not a good day if you do not have your phone.
Mario