Google Authenticator Codes doesn't seem to be working

Question

I have registered for Microsoft Entra ID P2 - Trial via the same email I used to post this question.

As MFA, I setup my account while I was abroad. Now I'm back to my country and tried to use the MS account but the code is apprently not matching. I tried to resynced time with my iphone. Still the same. I used Google Authenticator and I am the only admin/user of the organization.

How to proceed ?

Answer 1

@shubham sharma - I called but now response yet for the resolution

Answer 2

The one-time codes are most likely being rejected because the device generating them and the Microsoft service are out of time sync, or because the MFA registration is misconfigured. Since Google Authenticator is being used and the account is the only admin/user, use the following steps:

1. Verify device time sync again
   • Ensure the iPhone is set to the correct time zone and that “Set Automatically” is enabled in Date & Time.
   • Wait a few minutes and try a fresh code from Google Authenticator. If the clock was off by even a small amount when MFA was set up abroad, codes can be invalid.
2. Try another MFA method if any exist
   • If any other verification options were configured (SMS, voice call, email, or Microsoft Authenticator), choose Other verification options on the sign-in screen and attempt sign-in with that method instead.
3. Check for sign-in blocking or unusual-activity lock
   • Multiple failed MFA attempts can cause Microsoft Entra multifactor authentication to temporarily block further attempts as a security measure. In that case, wait and try again later, or use a different MFA method if available.
4. If another admin exists
   • If there is any other global admin in the tenant (even if rarely used), that admin can:
     • Sign in to the Azure portal → Microsoft Entra ID → Users → select the affected account → Authentication methods → Require re-register multifactor authentication.
     • After this, sign-in will prompt for MFA setup again, and a fresh TOTP registration (with Google Authenticator or Microsoft Authenticator) can be completed.
5. If truly the only admin
   • If there is no other global admin and no working alternative MFA method, this is a tenant lockout scenario.
   • In that case, contact Microsoft Support and have the issue escalated to the Microsoft Data Protection team / tenant recovery. They have processes to verify identity and reset MFA for the locked-out global admin so access to the tenant can be restored.
   • Use the appropriate customer service phone number from Microsoft Support and clearly state that this is a Microsoft 365 / Microsoft Entra business account, that MFA is enforced, and that there is only one global admin who is locked out.

Once access is restored, add at least one additional MFA method (for example, Microsoft Authenticator plus SMS/voice) and, if possible, another global admin account to avoid future lockouts.

---

References:

• Microsoft Curate - Troubleshoot Multi-Factor Authentication (MFA)
• Microsoft Monetize - Troubleshooting MFA
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
• Common problems with two-step verification for a work or school account
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A