Unable to require MFA re-registration for Entra user

Question

Recently migrated to a new Android device. Required to set back up existing Microsoft Authenticator MFA. Was able to do this for all accounts except one.

I need to generate a QR code to re-register this account with Microsoft Authenticator. Using the same process I used for my other Entra users, the problem I have is when I click on "Require re-register multifactor authentication" for this one account I get an error: "Require User Verification Delete operation failed. Try this command again or delete them one by one in the user authentication methods blade."

I am unable to generate a QR code to scan in Microsoft Authenticator to re-add this account. I tried to restore Microsoft Authenticator back to my old device, but it also requires me to scan QR code. At this time when I log into this account, and enter my password it prompts me for my MFA numbers which I do not have access to on my old device or new device. I need a QR code to scan to set this user up on my Microsoft Authenticator on my new device.

Here is the error message I receive:

Troubleshooting details

If you contact your administrator, send this info to them.

Copy info to clipboard

Error Code: 500121

Request Id: {redacted}

Correlation Id: {redacted}

Timestamp: 2026-03-11T01:51:06Z

Flag sign-in errors for review: Enable flagging

If you plan on getting help for this problem, enable flagging and try to reproduce the error within 20 minutes. Flagged events make diagnostics available and are raised to admin attention.

Bottom line, I need to generate QR code for a specific user so I can add into Microsoft Authenticator on my new android device. All of my other Entra users were able to re-request MFA without issue. Right now this single Entra user is stuck in a circle of requesting MFA authentication after I log in, but no valid Authenticator device registered to approve the MFA number request. Thanks.

Answer 1

Hello Anthony Eberle,

The issue you’re facing is due to the Microsoft Authenticator authentication method for this user being stuck or corrupted in Microsoft Entra ID. Because of this, the user is continuously prompted for MFA during sign‑in, but no valid authenticator device exists, and the “Require re‑register multifactor authentication” action fails with error 500121, preventing QR code generation.

Steps to resolve the issue:

1. A tenant admin must go to Microsoft Entra admin center → Users → <affected user> → Authentication methods
2. Manually delete the “Microsoft Authenticator” method (do not rely only on “Require re‑register MFA”)
3. If the user is fully locked out, create a Temporary Access Pass (TAP) for the user
4. Have the user sign in again — the QR code will be generated automatically, allowing Microsoft Authenticator to be re‑registered on the new device

To proceed with these steps, a Global Administrator is required. If a Global Admin is available in your tenant, please contact them to perform the above actions. If not, please share the requested details with us via private message, and we can assist further.