Fix Microsoft Authenticator Not Syncing with Microsoft 365 Work Account
Question details
The user cannot authenticate their Microsoft 365 work account because the Microsoft Authenticator app stopped syncing after an authentication request was denied, leaving the device and phone number blocked.
- Product
- Microsoft Authenticator / Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to sign in to a Microsoft 365 work account using multi-factor authentication (MFA).
- Observed behavior
- Authentication fails because the work account and phone number are blocked or flagged as suspicious by the system, while the personal Outlook account continues to work normally.
Before proceeding, ensure you have a stable internet connection and can contact your organization's IT administrator, as fixing a blocked work device requires Microsoft Entra ID (formerly Azure AD) admin privileges.
Review and Unblock the Device in Microsoft Entra ID (Admin Action)
Use this solution to re-enable a device that was automatically blocked by Microsoft 365 security policies after a denied authentication request.
When an unexpected authentication request is denied in the Microsoft Authenticator app, the system may flag the sign-in as a risk and automatically disable the device to protect the enterprise account. An administrator must intervene to restore access.
Have your IT administrator sign in to the Microsoft Entra admin center with global administrator or security administrator credentials.
Navigate to 'Identity' > 'Devices' > 'All devices' and search for the user's disabled mobile device using their name or device ID.
Select the device from the list and click 'Enable' from the top menu to restore its access to Microsoft 365 services.
Go to 'Security' > 'Risk detections' to verify and dismiss the flagged risk associated with the denied authentication request.
Reset Authenticator Registration and Re-add Account
Clear the corrupted MFA registration state and set up the Authenticator app from scratch.
Assign a Temporary Alternative MFA Method
Use this workaround to regain immediate access to your account while the primary Authenticator app or phone number is being investigated.
Looking for a Hassle-Free Office Suite?
If complex cloud authentication issues and Microsoft 365 logins are disrupting your workflow, consider switching to WPS Office. It provides a lightweight, locally accessible alternative that doesn't require continuous multi-factor authentication just to edit your documents.
- 1. Download WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install the software: Run the setup file and follow the straightforward on-screen instructions to complete the installation.
- 3. Open and edit your files: Launch WPS Office and immediately start opening or creating your documents, spreadsheets, and presentations without mandatory cloud logins.
Frequently Asked Questions
Why did my Microsoft Authenticator app stop working for my work account after I clicked deny?
Denying an unexpected authentication request often triggers an automated security protocol in Microsoft Entra ID. To prevent potential unauthorized access, the system may instantly disable your device or block your verification number.
Can I fix the Authenticator sync issue myself without an administrator?
If your work account device or phone number was blocked by your organization's security policies, you cannot fix it yourself. You must contact your IT administrator to review the sign-in logs and unblock the device.
Why is my personal Outlook account still syncing in the Authenticator app while my work account is blocked?
Personal Microsoft accounts and enterprise Microsoft 365 accounts are managed by completely separate systems. A security block placed by your organization's Microsoft Entra ID only affects your work profile, leaving your personal accounts fully functional.
What should the IT admin do if the phone number remains blocked after resetting settings?
If the administrator has cleared risk detections and reset MFA but the phone number is still recognized as suspicious by Microsoft's backend, they must open a direct Microsoft 365 support ticket so an engineer can manually review and unblock the telephone risk status.
