A cloud-based identity and access management service for securing user authentication and resource access
Because the phone changed, the Microsoft Authenticator app on the new device is no longer registered for the account, so sign-in to the GM catalog (which uses Entra ID/MFA) fails. The account must be reconfigured for MFA on the new phone.
Try the following, depending on what access is still available:
- If there is still access to the account in a browser
- Sign in to the account in a desktop browser (where it still works, if possible).
- Go to the Security info / Additional security verification page for the account.
- Remove the existing Microsoft Authenticator method.
- Add a new sign-in method and choose Authenticator app.
- On the new phone, install and open Microsoft Authenticator, then scan the QR code shown in the browser to complete setup.
- If completely locked out and this is a personal Microsoft account
- In a browser, go to https://account.microsoft.com and sign in if possible.
- Open Security info.
- Remove the existing Authenticator app entry.
- Add Authenticator app again and set it up on the new phone as above.
- If completely locked out and this is a work/school (Entra ID) account
- Contact the organization’s IT admin and request an MFA reset for the account so the Authenticator app can be re-registered on the new phone.
- If the locked account is the only global admin for the tenant, a support ticket with Microsoft Data Protection is required (opened by phone or via another tenant, as described in the referenced Q&A) so they can verify identity and reset MFA.
If none of the above is possible and no other admin exists, the tenant-level recovery via Microsoft support is required before access to GM catalog can be restored.
References:
- Use a screen reader to set up and troubleshoot multifactor authentication
- Authenticator locked and cannot access at all after replacing phone - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A