Multiple Authenticator App registrations for a AD hybrid account.

Question

Multiple Authenticator App registrations for a AD hybrid account.

David 0

We have a hybrid Active Directory with user accounts that need multiple authenticator apps registered. This has been working well for many years, but now the ability to create a qr code is not possible if the authenticator is already registered. This is a serious problem. We have numerous authenticator apps registered for various accounts which is by design for our business.

I discovered the issue when upgrading to a new phone and restoring the authenticator on the new device. I am required to update the authenticator on the new device with a new qr code, but Entra ID is not allowing multiple authenticator registrations.

Please help! Microsoft should not be dictating how our business operates.

Rukmini 42,850 Reputation points Microsoft External Staff Moderator

2026-01-03T00:28:48.6866667+00:00
Hello David,

This is not a problem with your hybrid AD setup, but rather expected behavior as a result of a recent Microsoft Entra ID enforcement.

Microsoft now restricts each user to a maximum of five authentication methods in total (hardware tokens plus Microsoft Authenticator apps).

Even during a restoration, a new phone cannot register another Authenticator since Entra ID prevents QR-code generation once this limit is reached.

To resolve this issue, you can delete one of the existing authenticator app registrations to free a slot, then register the new device.

Let me know if any further queries - feel free to reach out!
Rukmini 42,850 Reputation points Microsoft External Staff Moderator

2026-01-05T09:15:56.9966667+00:00

Hello David, Following up to see if the above provided information was helpful. If you have any further queries do let us know.