authenticator app

Question

i am trying to login and verify my email address on the authenitcator app but it keeps trying make me verify on the app while i am logging into with the 2mfa, so i am caught in a login loop and need to know how to fix it so i can move on to other things.

Answer 1

Your organization’s Microsoft 365 administrator must help break the loop because Microsoft Authenticator is your only available verification method and you cannot reach Security info to change it yourself.

Contact your IT administrator

Ask your company’s help desk or Microsoft 365 administrator to:

1. Verify your identity using your organization’s approved process.
2. Open the Microsoft Entra admin center.
3. Go to Entra ID → Users → your account → Authentication methods.
4. Select Require re-register MFA, and confirm the action.
5. If required, select Revoke sessions to force a fresh sign-in.

The re-registration action removes the existing Authenticator registration, phone methods, and software OATH tokens, so identity verification should happen first. On your next successful sign-in, you will be prompted to register a new MFA method.^1^

You can send IT this request:

I am locked in an MFA loop. Microsoft Authenticator is my only verification method, but I cannot approve the sign-in needed to register it. Please verify my identity, require MFA re-registration, and provide the organization’s approved recovery method.

If you do not know who administers the account, contact your internal help desk or the person who originally provided your Microsoft 365 username and password.^2^

If your organization supports Temporary Access Pass

A Temporary Access Pass (TAP) is a time-limited code that an administrator can issue for recovery when a strong authentication method is unavailable. This option works only if your organization has enabled TAP for your account.^3^

The administrator can:

1. Go to Entra ID → Users → your account → Authentication methods.
2. Select Add authentication method → Temporary Access Pass.
3. Configure its activation and duration, then select Add.
4. Copy the displayed TAP and provide it to you securely. The code cannot be displayed again after the administrator closes that screen.

After receiving the TAP:

1. Open the Security info page at https://mysignins.microsoft.com/security-info.
2. Enter your work email address.
3. When prompted, enter the TAP.
4. Select Add sign-in method → Microsoft Authenticator → Add.
5. Open Authenticator on your phone and select + → Work or school account → Scan a QR code.
6. Scan the QR code displayed in the browser and complete the test approval.
7. Confirm the new method works, then remove any obsolete Authenticator/device entry.

Do not use the personal Microsoft-account password recovery form: this is an organization-managed work account, and resetting the password alone does not replace the unavailable MFA method.

---

References

1. Manage user authentication methods for Microsoft Entra multifactor authentication
2. How do I find my Microsoft 365 admin? | Microsoft Support
3. Configure Temporary Access Pass to register passwordless authentication methods