Microsoft Authenticator code vs prompt on same phone

Question

I have MFA enabled using the Microsoft authenticator app on two different accounts. My "admin" account will prompt me to approve login while my normal account wants me to type the code from app.

Why the different behavior?  I would like my normal account to prompt for approval vs typing in code.

Is this a setting that I have overlooked in Azure?

Answer 1

Hi Joe-Dirt,

Yes, the option can be controlled. Please follow the steps below to find verification option in Azure:

1. Go to Azure Active Directory > Users > Multi-Factor Authentication.
2. In the new tab that opens browse to service settings.
3. Under verification options, check all of the boxes for methods available to users.

4. Click Save and close.

Hope the above information will be helpful for you.

Best,

Shawn

Answer 2

Hi Joe,

If you still need any help, feel free to post back. We're always here.

Best,

Shawn

Answer 3

Hi Joe-Dirt,

The approve option corresponds to "Notification from the app", the app is Microsoft Authenticator app. The approve page show up in your phone is generated by Authenticator app. Please post back if you have other concern on this question, we're always here.

Best,

Shawn

Answer 4

I am assuming this is set as I see the option if I 'click sign in another way'

Account 1 defaults to entering a the code

This is what I see, if I click sign in another way I see this...

Account 2 default to 'Approve' method.  I assume this is set in each account settings but I don't see where.

thanks again.

Answer 5

Hi Joe,

We haven't heard from you, if you still need any help on this issue, feel free to post back. We're always here.

Best,

Shawn