Microsoft Authenticator Not Allowing Access

Question

Whenever I attempt to sign in to my school microsoft account, I am required to enter in a code from my authenticator. Simple enough. Whenever I attempt to access my authenticator for my school account, I need to sign in to the account to access the authenticator. However, the sign in needs the authenticator to work, which I cannot access because I need to sign in to the authenticator to use it in the first place. This is confusing as to how it even happened, but it is angering. Any assistance would be awesome.

Answer 1

Hello,

Microsoft does not directly manage organization users. Instead, each organization's IT administrator is responsible for managing its users according to its internal protocols.

You should contact your organization's IT support team. They need to reset your MFA for you in order for this to work. Once the reset is completed, follow these steps:

1. Open your web browser and navigate to https://login.microsoftonline.com.
2. Sign in to your account.
3. You will be prompted to set up MFA again.

If your organization's IT administrator requires guidance, they can follow these steps:

1. Sign in to the Microsoft Admin Center at https://admin.microsoft.com using their credentials.
2. Navigate to Users > Active Users in the left-hand menu.
3. Select the relevant user.
4. On the user card that appears on the right, scroll to the bottom and click Manage multifactor authentication.
5. On the MFA settings page, locate the user's name, select it, and click Manage user settings on the right.
6. In the pop-up box, check the first box and click Save.

This process will reset MFA for the user, allowing them to set it up again.

Answer 2

This situation occurs when Microsoft Authenticator is the only configured verification method and the device or app setup has changed, creating a loop where sign-in requires Authenticator, but Authenticator itself cannot be accessed without signing in.

To resolve this for a school (work/school/Entra ID) account, follow these paths depending on what is available:

1. Try another sign-in method (if configured)

• If any alternative MFA methods were previously set up (SMS, phone call, email, security key, or another authenticator), use that instead of the Authenticator app when prompted.
• At the sign-in prompt, choose Other ways to sign in (or similar option) and select a different method.
• After signing in, go to https://mysignins.microsoft.com/security-info and add at least one more sign-in method so this loop does not recur.

2. If no alternative method works: contact the school/organization IT help desk

• For work/school accounts, only the organization’s IT admin can reset MFA when all verification methods are locked.
• Explain that the account is stuck in an Authenticator loop and that there is no access to any other MFA method.
• Ask the admin to reset the MFA registration in Microsoft Entra ID by:
  1. Going to the Microsoft Entra admin center (https://entra.microsoft.com).
  2. Navigating to Users → All users and selecting the affected user account.
  3. Opening Authentication methods.
  4. Selecting Require re-register multifactor authentication.
• After this reset, the next sign-in will prompt to set up Microsoft Authenticator again (typically via QR code) and optionally add backup methods.

3. If the account is a school account and there is no accessible admin

• If the account belongs to an institution, there is always at least one tenant admin; the school’s IT or help desk must be involved.
• If the user is the only admin for a small organization/tenant, the recommended path is to contact Microsoft support via the regional customer service phone numbers and request escalation to the Data Protection team so they can verify identity and reset MFA from their side.

4. Prevent getting locked out again

• After access is restored, sign in to https://mysignins.microsoft.com/security-info and:
  • Add at least two additional methods (for example, phone, email, or a hardware key) as backups.
  • Ensure Authenticator is fully set up and working before relying on it as the only method.

If repeated failed attempts have been made, Microsoft Entra MFA may temporarily block further attempts as suspicious activity. In that case, wait before trying again or use another MFA method once it is available.

---

References:

• Common problems with two-step verification for a work or school account
• Sign in to your work or school account using two-step verification
• Troubleshoot problems with Microsoft Authenticator
• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
• Microsoft authenticator sending me into a spiral - Microsoft Q&A