Can't login to Azure portal

Question

When I try to login to azure portal, it's asking for a six digit code. The Microsoft authentication app presents an 8 digit code.

How can I resolve this?

Answer 1

Azure is asking for a 6‑digit MFA code, but the Microsoft Authenticator entry being used is an 8‑digit TOTP that does not match the Azure MFA configuration for this account. Azure will only accept codes generated from an Azure‑registered MFA method (typically 6 digits or push notifications), so the current registration must be corrected.

Use one of these approaches, depending on whether there is another admin in the tenant:

1. If another admin exists in the tenant

That admin can reset MFA so the account can be re‑registered correctly:

1. Sign in to the Microsoft Entra admin center with an account that has admin rights.
2. Go to Identity → Users → All users.
3. Select the affected user.
4. Open Authentication methods.
5. Select Require re-register multifactor authentication.
6. Sign out and then sign in again with the affected account. Azure will prompt to set up MFA.
7. During the MFA setup, follow the Azure instructions to add the account to Microsoft Authenticator (scan the QR code or enter the code/URL). This creates the correct Azure MFA registration, which will then show the expected 6‑digit code or use push notifications for sign‑in.
8. If this is the only Global Administrator / no other admin

In a single‑admin scenario, self‑service reset is not possible from the portal because MFA blocks sign‑in. In that case, contact Microsoft Support and have them escalate to the Data Protection/Tenant Recovery team to reset MFA for the account, similar to other locked‑out‑admin cases. After they reset MFA, sign in again and re‑register the account in Microsoft Authenticator using the Azure‑provided QR code so the correct 6‑digit Azure MFA credential is created.

In both cases, the key is to reset and re‑register Azure MFA so that the Authenticator entry for this account is an Azure MFA registration (6‑digit or push), not a generic 8‑digit TOTP.

---

References:

• Reset Personal Azure MFA - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A