Microsoft Authenticator / MFA access issue

Question

Hello,

I am experiencing an issue with my Microsoft work account and Microsoft Authenticator.

When I try to sign in to my Microsoft account, I am required to approve the sign-in through Microsoft Authenticator. However, Microsoft Authenticator is not currently configured on my iPhone.

To configure Authenticator, I need to access the Microsoft Security Info page in order to obtain the QR code or the manual setup Code and URL. The problem is that I cannot access the Security Info page because Microsoft first requires verification through the Authenticator app.

There is also no alternative option available on the sign-in screen, such as:

• “Sign in another way”
• “I can’t use my Microsoft Authenticator app right now”
• SMS verification
• Phone call verification
• Any other verification method

As a result, I am unable to complete the MFA verification or register Microsoft Authenticator on my current phone.

Answer 1

Hi RA,

I hope you're doing well.

Based on what you've described, the next steps will depend on whether there are other administrators in your organization who can access the tenant.

If another administrator is available, I'd recommend contacting them and asking if they can reset the MFA settings for the affected account through the Microsoft Entra admin center. This is usually the quickest way to regain access.

For reference: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | …

If you're the only administrator and you've been locked out of the account, you'll need to contact Microsoft's Data Protection team for assistance. They are the only team authorized to help recover access in situations involving the sole administrator account.

You can find Microsoft's support numbers here: Contact Microsoft customer support | Microsoft Support

When contacting Microsoft, be prepared to verify ownership of the subscription. You may be asked for information such as:

• Organization name
• Billing or payment information
• Registered phone number
• Alternate email address

Once your identity is verified, the privacy team will be able to reset your MFA settings. You can then reset your account in the Microsoft Authenticator app on your new device or choose a different authentication method to sign in.

Tips for navigating the IVR: 

In some countries, an automated voice system is used. Example of a dialogue:

• IVR: What problem is bothering you?
• Client: Authenticator
• IVR: What product do you use?
• Customer: Office 365 for business
• IVR: School or Business Account?
• Client: Companies
• IVR: Are you an administrator?
• Client: Yes
• IVR: Is there another administrator in your organization?
• Client: No. I am the only admin in my tenant    
• IVR: Do you need to create a support ticket?
• Client: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

In case you are unable to contact the frontline support:

Consider signing up for a trial subscription to create a new tenant: Microsoft 365 Business Plans and Pricing | Microsoft 365

Once set up, you can access the new tenant's admin console and submit a support ticket to speak with the data protection team on behalf of the previous tenant. Once your issue is resolved, please remember to cancel the trial subscription to avoid any unintended charges.

If your organization's subscription is from a partner or reseller: Contact the reseller's support provider to help open a service request on behalf of you instead.

I hope this helps point you in the right direction. If you have any updates or additional questions, feel free to reply back and I'll do my best to assist further.

Best regards.

---

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.