Why am I getting “More information required” when signing in?

Question

When I sign in to my Microsoft 365 account, I get a message saying “More information required” before I can continue. It asks me to set up Microsoft Authenticator and complete MFA registration.

I’m wondering what causes this message to appear. Is it triggered by Security Defaults, a Conditional Access policy, or another Microsoft Entra ID setting?

Also, is there a way for an administrator to identify which policy is requiring the user to register for MFA?

Answer 1

Dear @Smith Garry,

Based on your description, I understand that the user receives a "More information required" prompt during Microsoft 365 sign-in and is required to register Microsoft Authenticator for MFA.

The "More information required" prompt typically appears when Microsoft Entra ID requires the user to register security information (MFA methods) before they can complete sign-in.

As mentioned above, I assume you are the user and have not set up Microsoft Authenticator yet.

In this situation, since MFA registration and authentication policies are managed by your Microsoft 365 or Microsoft Entra ID administrator, I recommend contacting your IT administrator for assistance. They can review the tenant configuration, determine which policy is requiring MFA registration, and help you complete or reset the registration process if needed. You can also refer to this Microsoft support article for more information: Manage authentication methods - Microsoft Entra ID | Microsoft Learn  

And about your concerns, this behavior can be triggered by several configurations:

Security Defaults

• When Security Defaults are enabled, all users are required to register for multifactor authentication. If a user has not completed MFA registration, they will be prompted to provide additional security information during sign-in

Conditional Access Policies

• A Conditional Access policy may require MFA directly or target the Register security information user action. In these scenarios, users are prompted to register authentication methods before they can access organizational resources

Authentication Methods Registration Campaign

• Organizations can configure a registration campaign that prompts users to enroll in Microsoft Authenticator or passkeys during sign-in. The user experience can resemble the "More information required" prompt

Furthermore, How can an administrator identify the policy responsible?

If you are an Admin of your organization, the recommended approach is to review the user's Sign-in Logs in Microsoft Entra ID:

• Go to Microsoft Entra Admin Center.
• Navigate to Identity > Monitoring & health > Sign-in logs.

• Open the affected sign-in event.
• Review:
  • Conditional Access tab
  • Authentication Details
  • Applied Policies

The sign-in log typically shows which Conditional Access policies were evaluated and whether MFA registration was required.

I hope information above meet your expectations, please feel free to reach out if you have any other questions.

---

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

The “More information required” prompt appears when the user is being required to register multifactor authentication (MFA) before continuing sign-in.

Based on the documented Microsoft Entra behavior, this can be triggered by these configurations:

1. Security defaults
   • Security defaults require users to use MFA with the Microsoft Authenticator app.
   • New users are prompted to register for MFA, and they have a 14-day registration period starting from the first sign-in after security defaults is enabled.
   • After 14 days, sign-in is blocked until registration is completed.
2. Conditional Access policy
   • A Conditional Access policy can require MFA for specific users, groups, roles, apps, or conditions.
   • Microsoft documents examples such as requiring MFA for administrator roles.
   • Conditional Access is also described as the mechanism that evaluates sign-in conditions and then applies access controls such as MFA.
3. Microsoft Entra ID Protection MFA registration policy
   • When an administrator enables the ID Protection policy that requires MFA registration, users are given a 14-day period to register and then are forced to complete registration.
   • This policy causes a registration interrupt during sign-in to Microsoft Entra integrated applications.

For the specific wording “More information required”, Microsoft documents that users see this during the MFA registration interrupt when MFA registration is required.

For identifying what is causing it:

• If the tenant uses Security defaults, that alone can cause the prompt.
• If the tenant uses Conditional Access, that can also cause MFA registration or MFA enforcement.
• If the tenant uses ID Protection MFA registration policy, that can explicitly require registration.
• Microsoft also states that security defaults and Conditional Access can’t both be enabled at the same time:
  • If security defaults are enabled, Conditional Access policies can’t be enabled.
  • If any Conditional Access policies are enabled, security defaults can’t be enabled.

So, from an admin perspective, the first check is:

1. Go to Microsoft Entra admin center.
2. Check Entra ID > Overview > Properties > Manage security defaults.
3. If security defaults are Enabled, that is a supported cause of the prompt.
4. If security defaults are Disabled, review Conditional Access and ID Protection policies that require MFA registration or MFA.

For identifying which policy is responsible, the context supports these points:

• For Conditional Access, Microsoft recommends creating policies in Report-only mode first and using Conditional Access insights and reporting with sign-in logs to understand policy impact.
• That reporting can be used to evaluate how an MFA policy affects the tenant.
• If the user receives an Authenticator setup error stating that registration is blocked because of admin restrictions, Microsoft notes this can happen when an admin has configured a Security Information Registration Conditional Access policy or other Conditional Access policies that block registration.

A practical admin path is:

1. Check whether Security defaults are enabled.
2. If not, review Conditional Access policies that require MFA or registration.
3. If ID Protection is licensed and in use, review the MFA registration policy.
4. Use Conditional Access insights and reporting and sign-in logs to determine which Conditional Access policy is affecting the sign-in.

If the user is blocked with a message that no authentication methods are enabled, that requires administrator action to enable at least one authentication method for the account.

---

• # Step 3: Protect your Microsoft 365 user accounts
• How To: Configure the multifactor authentication registration policy
• Verify that users are set up for mandatory multifactor authentication (MFA)
• How to add your accounts to Microsoft Authenticator
• Self-remediation experience with Microsoft Entra ID Protection and Conditional Access
• Microsoft-managed Conditional Access policies
• Disable message more information required when OATH is linked - Microsoft Q&A
• Users receive error in Authenticator - Microsoft Q&A
• How do i apply authentication methods to my account if I cant get in? - Microsoft Q&A