'App password' is not a login method available, even after I turn it on for organization

Question

'App password' is not a login method available, even after I turn it on for organization

Anonymous

I have a MS365 Business Standard subscription, with 3 accounts (including the admin account) in the organization.

I have followed the instructions in Azure to allow users to create app passwords. I've also consulted the end-user references on how to set up app passwords.

However, "App password" is simply not an option in the drop-down menu of Security Info > Add method. It's not there for the admin user, and it's not there for the regular users. The authenticator app, text message and email are all available. I was even able to turn on other MFA options within Azure, so now "security key" is also an option.

I have triple checked that app passwords are turned on in Azure:

App password is still not an option in the list:

What am I missing? What else do I need to do to make app passwords available?

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

5 answers

Answer 1

Ivan, yes this is very maddening!

From this page https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx?BrandContextID=O365 all of your users will be shown. Make sure the users you want have the Multi-Factor Auth status of "Enforced"

Then login as that user. (In my case automated@) Jump through the 2FA hoops. In my case, SMS text to a cell phone.

Go to this page: https://mysignins.microsoft.com/security-info

Click the + to "add sign-in method" and you should see something like this with "App password" as one of the methods:

Does it work for you?

Answer 2

@TZ Thanks! You're right, that is the page, and I successfully ticked those three boxes, disabled, waited 10 minutes, then re-enabled MFA.

However, while more security options are now available, "app password" is not one of them:

I went back to the Azure security page and confirmed that "allow users to create app passwords..." is still set.

What now? @Choly Li MSFT This obviously isn't a transient issue now, as I've disabled and re-enabled the settings as you suggested and it's persisted over several months. Frankly this is causing us to reconsider using MS365 and evaluate moving back to Google Apps for Business, as we don't need the complexity of the Azure Active Directory system especially if it can't handle something as basic as logging into email from an email client.

Answer 3

Hi ivan000,

Good day for you ang thanks for posting on the Microsoft Communication.

I have read your thread carefully, this normally doesn't happen and you've followed the correct steps. Sometimes there are transient issues and it could prevent form the app password option showing up in the My signin Page. And based on our test, we suggest you might kindly follow this method>disable one of your users' MFA>choose the Manage user settings and click the three options:

Waiting for about 10 minutes, then please re-enable the test user's MFA and log in M365 portal > user account information > security info >check whether the app password shows up.

If there is any update, please feel free to contact us. Wish you a brilliant day!

Thanks and regards,

Choly Li

Answer 4

Anonymous

For me that page is here:

https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx?BrandContextID=O365

0 comments

Answer 5

Choly,

Where do I "disable one of your users' MFA>choose the Manage user settings and click the three options"? I don't see that option or the screenshot you provided anywhere. I see links to revoke sessions and to require re-authentication, but nothing that even says "manage user settings".

Admittedly since user settings are configured in dozens of different places I am probably just not looking in the right place. Can you clarify? Thanks.