Fix Azure Sign-In Requiring Microsoft Authenticator Without a Code
Question details
The user is unable to sign into Azure because the system prompts for approval from a Microsoft Authenticator app that was never configured, creating a login loop that blocks access.

- Product
- Microsoft Azure
- Device & OS
- not provided
- Scenario
- Attempting to log into a Microsoft Azure work or school account and accessing security settings.
- Observed behavior
- The login process repeatedly prompts for a Microsoft Authenticator code, but the user is not enrolled. The same authentication requirement blocks the user from accessing their security settings to fix the issue.
Before proceeding, verify whether you are trying to access a personal Microsoft account or an organization-managed work/school account, as this specific lockout issue primarily affects organizational tenants.
Contact Your Organization's IT Administrator to Reset MFA
Since you are locked out of your own security settings by the MFA prompt, only your organization's Microsoft 365 or Azure administrator can reset your authentication methods.
When an account gets stuck in an authentication loop requiring an unconfigured app, it usually means Conditional Access policies have been enforced tenant-wide, but your specific user profile missed the registration window. Because the security portal is also protected by MFA, self-service recovery is not possible.
Reach out to your company or school's IT helpdesk, system administrator, or the person who provided you with your Microsoft 365 login credentials.
Ask the administrator to navigate to the Microsoft Entra ID (formerly Azure AD) portal, locate your user profile, and select 'Require re-register MFA'. This revokes all existing MFA sessions.
Once the administrator confirms the reset, attempt to log into Azure again. You will now be prompted to properly set up the Microsoft Authenticator app from scratch.
If the administrator is unable to clear the MFA requirement internally, ask them to log into https://admin.microsoft.com/ and open a formal service request with Microsoft Support to unlock the account.

Switch to WPS Office for a Hassle-Free Experience
Dealing with complex cloud account lockouts and MFA loops can seriously disrupt your workflow. Consider trying WPS Office as a free, lightweight, and highly compatible alternative that lets you focus on creating documents without the constant administrative overhead.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install WPS Office: Run the downloaded file and follow the quick on-screen instructions to complete the installation.
- 3. Start Creating: Launch WPS Office to instantly open, edit, or create your Word, Excel, and PowerPoint documents without complicated tenant setups.

Frequently Asked Questions
Why is Azure asking for an Authenticator code I never set up?
This usually happens when an organization implements strict security defaults or Conditional Access policies that require MFA. If you missed the initial registration period, the system assumes the policy is active and prompts for an app approval, creating a lockout loop.
Can I reset my own Microsoft Authenticator settings without an admin?
No. If you are locked out of the Microsoft security portal (aka.ms/mfasetup) by the exact same MFA prompt, self-service reset is impossible. You must contact your IT administrator to clear your existing MFA configuration.
What should the IT administrator do to fix this MFA loop?
The administrator should log into the Microsoft Entra ID portal, find your user account under 'Users', select 'Authentication methods', and click 'Require re-register MFA'. This forces the system to let you set up the Authenticator app again on your next login.




