Fix Microsoft Authenticator Denied After QR Code Setup on Android
Question details
The user is trying to resolve an issue where the Microsoft Authenticator app instantly denies the authentication attempt right after scanning a QR code on an Android device.

- Product
- Microsoft Authenticator
- Device & OS
- Android
- Scenario
- Setting up a multi-factor authentication (number-matching) account by scanning a QR code provided on a computer screen.
- Observed behavior
- Instead of completing the setup process, the Authenticator app immediately displays a 'Denied' notification after the QR code is successfully scanned.
Ensure your Android phone has a stable cellular or Wi-Fi connection, and verify that the Microsoft Authenticator app is updated to the latest version in the Google Play Store.
Check Device Time Sync and Clear App Cache
Authentication tokens rely heavily on exact time synchronization. Incorrect device time or corrupted cache data is the most common cause for immediate denial.
Authenticator apps use time-based one-time passwords (TOTP). If your Android phone's internal clock is off by even a few seconds compared to Microsoft's servers, the QR code payload will be considered invalid and instantly denied.
Open your Android 'Settings', navigate to 'System' or 'General Management', select 'Date and time', and toggle on 'Automatic date and time' (or 'Use network-provided time').
Go to 'Settings' > 'Apps' > 'Authenticator' > 'Storage', then tap 'Clear cache' to remove temporary files that might be causing glitches.
Restart the Microsoft Authenticator app, initiate the setup process again, and scan the QR code displayed on your computer.

Seek Help in the Microsoft Authenticator Q&A Forum
If standard troubleshooting fails, the issue may be rooted in device-specific bugs or Exchange Online backend policies requiring dedicated support.
Use WPS Office for a Hassle-Free Productivity Experience
Tired of dealing with complex multi-factor authentication loops, account lockouts, and login errors when just trying to work on a document? WPS Office offers a powerful, lightweight, and free alternative to Microsoft Office that lets you focus on productivity without the login headaches.

Frequently Asked Questions
Why does Microsoft Authenticator say denied immediately after setup?
This typically happens if your phone's date and time settings are out of sync with Microsoft's servers, preventing the time-based token from validating. It can also occur if your organization's IT policy blocks certain Android device models or OS versions.
Does the number-matching feature work on older Android devices?
Microsoft Authenticator requires a supported Android OS version to utilize advanced features like number-matching. If your device is running an outdated, unsupported version of Android, the setup might fail or display denied errors.
How can I completely reset the Microsoft Authenticator app on Android?
You can reset the app by going to your Android Settings > Apps > Authenticator > Storage, and selecting 'Clear Data'. Be aware that doing this will erase all existing accounts and tokens in the app, and you will need to set them up again.




