Microsoft Authenticator Loop Problem

Question

I can't sign into my work email to add it to authenticator because I need to verify my login using authenticator. How in the world am I supposed to add an email to authenticator that I can't log into unless I'm already logged into it?

Answer 1

It seems you're encountering a loop issue when trying to add your work email to the Microsoft Authenticator app. This can happen if your organization's Conditional Access policies require phishing-resistant authentication for accessing all resources, including the Authenticator app itself. Here are some potential workarounds:

1. Use a Temporary Access Pass (TAP): If your organization allows it, you can request a Temporary Access Pass, which can help you register the passkey without needing to authenticate through the Authenticator app.
2. Check with your IT department: They may need to adjust the Conditional Access policies to allow you to add your email to the Authenticator without being stuck in a loop.
3. Access specific applications: If possible, see if the policy can be modified to target specific applications rather than all resources, which may help you bypass the loop.

If these options are not feasible, contacting your IT support for assistance would be the best course of action.

---

References:

• Workarounds for an authentication strength Conditional Access policy loop
• Users get in a loop when they try to add passkey in Authenticator

Answer 2

Hello @Stuart Aldrete,     

Thank you for reaching out to the Q&A forum! 

Since this is a work account, please confirm this point: Are you a regular user or an admin?  

If you are a user and there is another admin account that can access the Microsoft Entra admin center, you need to contact them to help you follow these steps:  

Revoke MFA sessions and require re-registration in Microsoft Entra admin center:       

For step-by-step details, refer to the official Microsoft documentation: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID |…      

Once IT admin resets your Multi-Factor Authentication (MFA) settings, the next time you sign in to your organization’s resources, you will be prompted to set up new security verification methods.   

Although I am a forum moderator and do not have access to your backend systems to help you directly, I have provided a detailed guide above that you can share with your IT department.     

If you are the only admin in your tenant, please let me know; I’ll guide you through the steps to regain access.       

Looking forward to hearing from you.       

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.