About how to log in if Authenticator is accidentally deleted

Question

First of all, I remember my account and password.
Importantly, the Authenticator application was accidentally deleted.And the bound mobile phone number has also been changed.
Then I need a password and an Authenticator verification code when I log in to the web page or the Authenticator application.
I entered an endless loop, has been unable to log in, how to solve this problem?
I still have important files backed up in my account.
The account experiencing the problem is ******@wbl2.onmicrosoft.com

Answer 1

@peng zhang

Thank you for posting your question in Microsoft Q&A.

If you don't have access to authenticator app, then you will not be able to login to Azure portal. MFA is an extra layer of authentication used for security.

There is no easy way to get the MFA registration reset because it becomes easy for any other user to reset your MFA and add his/her phone number in it.

There is no option where you can reset your MFA by your own. You will have to contact Azure AD administrator in your organization to get MFA reset for your account.
If you don’t know who are the admins then you can follow below steps to know who are the admin in your tenant. There is a PowerShell way to find global admin in your Azure AD. However, to use PowerShell as well you will have to authenticate yourself first. For authentication again it will prompt for MFA to be completed.

I would suggest you ask one of your colleague to perform below steps and share the global admin details with you so that you can contact admin and get your MFA registerd.

• Open Windows PowerShell as administrator.
• Run command “Install-Module azuread”
• Once installed you can run command “Connect-AzureAD” and enter user credentials once it asks for.
• Once you login, you can run command “Get-AzureADDirectoryRole”.
• From the output you can copy the object ID of Global administrator
• Run command “Get-AzureADDirectoryRoleMember -ObjectId "Paste the object ID of global admin that was copied earlier"
• You will get the list of users with global admin role assigned.

Now you can contact any global admin from the list and ask him to perform below steps to reset your MFA so that you can re-register for authenticator app.

• Admin has to login to Azure portal and access Azure active directory.
• Once done they have to go to users blade on the left.
• Click on Authentication methods and click on “Require re-register multifactor authentication”.
• Now when you try to login to Azure services it will prompt you to register for MFA again.

Let me know if you have any questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.