A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
This loop happens when Microsoft Authenticator is the only registered sign-in method and the app on the phone is no longer set up for the account. The app keeps asking for approval from an Authenticator instance that no longer exists.
Resolution depends on whether the account is work/school and whether there is an admin who can reset MFA.
- If this is a work or school (Entra ID / Azure AD) account and there is an IT admin
- Contact the organization’s IT/help desk and ask them to reset the multifactor authentication methods for the account in Microsoft Entra ID.
- The admin can:
- Go to the Microsoft Entra admin center (https://entra.microsoft.com).
- Navigate to Users → All users → [select user] → Authentication methods.
- Use Require re-register multifactor authentication to clear existing MFA registrations.
- After this reset, sign in again to Azure; the portal will prompt to set up Microsoft Authenticator from scratch (scan QR code, etc.), breaking the loop.
- If this is a work or school account and there is no alternative MFA method and no other admin
- If the account is a business/education tenant and the user is the only admin, Microsoft’s Data Protection team must assist.
- Call the regional Customer service phone numbers - Microsoft Support and request a ticket with the Data Protection team to reset the admin’s MFA.
- When the IVR asks, indicate:
- Product: Office 365/Microsoft 365 for business.
- Account type: company/education.
- Role: tenant administrator.
- Problem: lost access to Microsoft Authenticator and need MFA reset.
- Alternatively, create a temporary trial Microsoft 365 tenant, sign into its admin center, and open a support ticket from there asking the Data Protection team to reset MFA for the original tenant.
- If this is a personal Microsoft account and there is no working alternative method
- Use the account recovery and security info reset flow (for personal accounts) from a browser where the account is still signed in, and remove or change the security info so that Authenticator is not the only method.
- If locked out everywhere and no alternative methods work, recovery must be done via Microsoft’s standard account recovery process; forum moderators and tools cannot bypass this.
- If the issue is “Authentication did not complete” rather than a pure loop
- Ensure the Authenticator app is:
- Unlocked on the device.
- Updated to the latest version.
- Allowed to show notifications.
- On a device with correct date/time and working internet connection (try switching Wi‑Fi/mobile data).
- Then retry sign-in; if still stuck in the loop, an MFA reset as above is required.
- Ensure the Authenticator app is:
In summary, the loop cannot be broken from the app alone when Authenticator is the only method. An admin (or Microsoft support/Data Protection for sole admins) must reset the MFA registration so the account can be re-enrolled on the phone.
References:
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Troubleshoot problems with Microsoft Authenticator
- Authentication did not complete
- Common problems with two-step verification for a work or school account