I cannot sign into Azure via a browser, but can in the Azure CLI

Question

I cannot sign into Azure via a browser, but can in the Azure CLI. I get redirected to the 'Enter a Code' prompt but the code in Authenticator is longer than the code the prompt is expecting.

When i choose 'Sign in another way' and choose 'Approve a request on my authenticator app', i never receive the request on my phone. I have the app approval set up in my profile because i can log in other Microsoft services using it.

I can login with no problems via the Azure cli and can see the correct sub and tenant id. Its driving me crazy, Please help!!

Answer 1

The symptoms indicate an issue with the browser-based sign-in/MFA experience rather than with the account or Azure itself, since Azure CLI sign-in works.

Try these steps in order:

1. Clear browser sign-in state
   • Sign out of all Microsoft accounts in the browser.
   • Clear cookies and site data for Microsoft/Azure sign-in pages (for example, login.microsoftonline.com, portal.azure.com, microsoft.com).
   • Close all browser windows and reopen the browser.
   • Try signing in to the Azure portal again.
2. Check for browser security/HSTS issues
   • If using Microsoft Edge and you see security warnings (for example, “The connection for this site isn't secure”) when Azure CLI or other tools try to open sign-in pages, remove any HSTS policy for localhost:
     • In Edge, go to edge://net-internals/#hsts.
     • Under Delete domain security policy, enter localhost and select Delete.
   • Then retry the browser sign-in.
3. Align MFA method and prompt
   • The “Enter a code” prompt expects a specific type of code (for example, a 6‑digit TOTP code or a number match) that must match the method configured for the sign-in.
   • If the prompt is expecting a shorter code than what Authenticator shows, cancel that attempt and explicitly choose Sign in another way, then select the method that matches what Authenticator is configured for (for example, push approval/number match rather than code entry).
   • Since push approvals are not arriving, focus on getting a clean sign-in session (steps 1–2) so that the correct MFA prompt is shown.
4. Use a different browser or in-private session
   • Try signing in from a different browser (or an InPrivate/Incognito window) on the same machine. If it works there, the issue is with cached state or extensions in the original browser.
5. If Conditional Access/MFA policies are involved
   • If the tenant has Conditional Access policies requiring MFA, ensure that MFA is enforced at sign-in and not only at resource access. Misalignment can cause repeated or mismatched MFA prompts.
   • If errors mention “Interactive authentication is needed” or “MFA is required,” follow the guidance to ensure MFA is satisfied at sign-in.

If none of the above resolves the issue, an administrator can temporarily reset MFA registration for the account from the Microsoft Entra admin center so that MFA methods can be re-registered cleanly.

---

References:

• Sign into Azure interactively using the Azure CLI
• Troubleshooting Azure CLI
• How to troubleshoot non-browser apps that can't sign in to Microsoft 365, Azure, or Intune
• Can not access Azure - Microsoft Q&A
• Reset Personal Azure MFA - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A