Microsoft Authenticator App

Question

Microsoft Authenticator App

Jamie Beth Elder 0

I have an employee who cannot log into his microsoft account because he is unable to use his authenticator app. The authenticator is asking for him to enter the code showing on his authenticator app.....which he cannot access.....we are on merry go round here. He is unable to work. Please help.

thank you !

VEMULA SRISAI 11,550 Reputation points Microsoft External Staff Moderator

2026-03-13T18:40:42.09+00:00

Hello Jamie Beth Elder,

I understand the frustration — this is a common situation when the Microsoft Authenticator app is no longer accessible.

In this case, the account is stuck in an MFA loop and cannot be resolved by the user alone. A Microsoft Entra ID administrator needs to reset your multi‑factor authentication methods so you can re‑register the Authenticator app.

Once the admin resets MFA, you’ll be able to sign in again and set up the Authenticator app from scratch. This is a security measure by design, not an issue with your account specifically.

Please contact your IT administrator or tenant admin to perform the MFA reset. After that, everything should work normally. If you are the only global admin to assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII),
VEMULA SRISAI 11,550 Reputation points Microsoft External Staff Moderator

2026-03-18T05:44:23.48+00:00

Jamie Beth Elder could you please check my comment and let me know you need any further assistance on this.

1 answer

Your answer

VEMULA SRISAI 11,550 Reputation points Microsoft External Staff Moderator

2026-03-13T18:40:42.09+00:00

Hello Jamie Beth Elder,

I understand the frustration — this is a common situation when the Microsoft Authenticator app is no longer accessible.

In this case, the account is stuck in an MFA loop and cannot be resolved by the user alone. A Microsoft Entra ID administrator needs to reset your multi‑factor authentication methods so you can re‑register the Authenticator app.

Once the admin resets MFA, you’ll be able to sign in again and set up the Authenticator app from scratch. This is a security measure by design, not an issue with your account specifically.

Please contact your IT administrator or tenant admin to perform the MFA reset. After that, everything should work normally. If you are the only global admin to assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII),
VEMULA SRISAI 11,550 Reputation points Microsoft External Staff Moderator

2026-03-18T05:44:23.48+00:00

Jamie Beth Elder could you please check my comment and let me know you need any further assistance on this.

Answer 1

Use another verification method or have an admin reset this user’s MFA registration.

Check for alternative sign-in methods
- On the sign-in screen, when prompted to approve via Microsoft Authenticator, select “I can’t use my Microsoft Authenticator app right now” or “Use a different verification option” (if available).
- Choose SMS, phone call, or another method the user previously registered.
- After signing in, update the user’s Security info / Authentication methods and reconfigure Microsoft Authenticator.
If no alternative method works (admin action required)
- As an administrator in Microsoft Entra ID, sign in to https://entra.microsoft.com.
- Go to Users → All users → [select the employee] → Authentication methods.
- Use Require re-register multifactor authentication (or equivalent option) to reset the user’s MFA.
- Have the employee sign in again; they will be prompted to set up Microsoft Authenticator from scratch using a QR code.
If the locked-out user is the only admin
- If this employee is the sole administrator and no one else can reset their MFA, contact Microsoft’s Data Protection team via the regional Customer service phone numbers and request an admin MFA reset for the tenant.
- If reaching support is difficult, create a temporary trial Microsoft 365 tenant, go to the Microsoft 365 Admin Center → Help & support, and open a ticket asking to speak with the Data Protection team on behalf of the original tenant.

Until MFA is reset or an alternative method is used, the user will remain unable to sign in, so an admin-driven reset or Microsoft support involvement is required.

References:

Share via

Microsoft Authenticator App

1 answer

Your answer