Microsoft Authenticator app or Token Error

Question

We have enabled 2FA on our email accounts using Microsoft Authenticator. We use Azure to go in and manage the 2FA for all of our users. I have one user that I’m trying to enable his 2FA again and I’m getting the following error:

Apparently, the max limit for hardware tokens is set by Microsoft at 5. To fix this issue you should be able to go to “Additional Security Verification” and delete any unwanted or stale tokens like the screenshot below.

To get there: https://account.activedirectory.windowsazure.com/r/#/profile

Under Manage

• ·       Additional Security Verification

·         With this user he does not have the “Additional Security Verification” option listed under manage. I also cannot find anywhere in the Azure console to manage this.

Any help is appreciated!!

Answer 1

Hi Tommy,

As per your error message, here I find one similar thread you may refer this thread and see the result.

As you mention “Additional security verification" is missing from his security settings” Administrators can also reset user's MFA through https://portal.azure.com Then selecting Azure Active Directory -> Users -> Select the User -> **Authentication Methods.**There you can set up some types of authentication methods, require them to re-register, and reset their password as well.

Here are some articles for your reference:

Enable Azure Multi-Factor Authentication.

If issue persist, then for Microsoft Authenticator with the two-factor authentication related issues and questions, we have a specific channel and we suggest you post a new thread in Microsoft Authenticator app forum for further expert help.

I appreciate your time and understanding.

Best Regards

Waqas Muhammad

Answer 2

If issue persist, then for Microsoft Authenticator with the two-factor authentication related issues and questions, we have a specific channel and we suggest you post a new thread in Microsoft Authenticator app forum for further expert help. 

I appreciate your time and understanding.

Best Regards

Waqas Muhammad

Thank you for your reply sir. Would it be possible to have this post moved to the proper channel?

Regarding the issue at hand, I discovered that the users cell number needed to be enabled within the users Azure AD profile and under authentication methods. THe user then received an SMS message that we approved and then we were able to get to the "Additional Security Verification" link and delete all the stale Authenticator app entries. 

Answer 3

Hi Tommy,

Thanks for sharing updates with us.

We are sorry to say we have limited resources and that we don’t have channel to move your thread to correct category  however we have a specific channel TechNet forum-Support for Microsoft Authenticator Appwith Microsoft Authenticator related issues and questions, I suggest you post a new thread there for expert help.

I appreciate your time and understanding.

Best Regards

Waqas Muhammad