Unable to SWITCH to my directory because phone with MFA is lost

Question

Hi,
I am able to logon with my corporate email address
But when I try to SWITCH to my directory, I have an MFA challenge and I lost access to the Phone on which I had MFA configured

Microsoft support says - contact your corporate IT support
My IT support says - contact Microsoft support

Tired of being bumped around. Any other options?

Answer 1

Hi @Sandeep Batta

Thank you for asking this question on the **Microsoft Q&A Platform. **

Your Global administrator or User Administrator of your Azure AD has to follow the steps below to reset and unblock MFA in Azure Active Directory via Azure Portal and PowerShell.

Using Azure Portal:

• Sign in to the Azure portal with the tenant Global Administrator account.
• Navigate to Azure Active Directory > Users > All users > Choose the user you wish to perform an action on >** select Authentication methods** > Require Re-register MFA.
• Once this is done, the next time the user signs in, he/she will be requested to set up a new MFA authentication method.

Note: The user's currently registered authentication methods aren't deleted when an admin requires re-registration for MFA. After a user re-registers for MFA, we recommend they review their security info and delete any previously registered authentication methods that are no longer usable.

Using PowerShell:

• Install the MSOnline PowerShell module.
• Run Connect-MSOLService and sign in with the Global Administrator account.
• Run Set-MsolUser -UserPrincipalName ******@contoso.com -StrongAuthenticationMethods @() cmdlet to reset the MFA registration information.

Read More: Manage user authentication methods for Azure AD Multi-Factor Authentication

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

---