'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Microsoft Authenticator Setup Loop in Exchange Online
Question details
Users are unable to complete the sign-in process for Exchange Online on a desktop browser because the system repeatedly prompts them to download and set up Microsoft Authenticator, even when alternative methods are selected.
- Product
- Exchange Online / Microsoft 365
- Device & OS
- Desktop and iOS
- Scenario
- Attempting to access Exchange Online via a desktop browser utilizing two-factor authentication.
- Observed behavior
- The desktop browser gets stuck in an infinite two-factor authentication loop, continuously demanding Microsoft Authenticator setup. However, sign-in functions normally on a connected iPhone.
Ensure you have access to your Microsoft 365 admin account via the mobile device (e.g., iPhone) where the sign-in is currently working, as administrative privileges are required to adjust the tenant's security settings.
Disable the Microsoft Authenticator Registration Campaign
This MFA loop is typically caused by a synchronization issue within the Microsoft 365 registration campaign. Disabling the campaign from a working device can resolve the loop.
Microsoft 365 utilizes registration campaigns to nudge users toward setting up Microsoft Authenticator. When a synchronization bug occurs, it forces the prompt continuously on desktop browsers, ignoring alternative authentication methods.
Using the iPhone where your Exchange Online sign-in currently works, navigate to the Microsoft Entra admin center and sign in with your administrator credentials.
In the admin dashboard, expand the 'Protection' menu on the left sidebar and select 'Authentication methods'.
Click on 'Registration campaign' to view the settings prompting users to download the Microsoft Authenticator app.
Change the state of the campaign to 'Disabled', save your changes, and then attempt to sign in to Exchange Online on your desktop browser again.
Contact Microsoft 365 Business Support
If you cannot access the admin center from any device or disabling the campaign fails, Microsoft support must verify the tenant and manually reset the authentication registration.
Try WPS Office for Seamless Document Management
While you troubleshoot complex Exchange Online and Microsoft 365 sign-in loops, keep your work moving with WPS Office. It is a powerful, free alternative that allows you to manage all your documents locally or via the cloud without being interrupted by complex MFA synchronization bugs.
- 1. Download the Software: Visit the official WPS Office website and click the free download button for your specific desktop or mobile operating system.
- 2. Install WPS Office: Run the downloaded setup file and follow the quick on-screen instructions to install the suite on your device.
- 3. Edit Files Immediately: Open your existing Microsoft Office files instantly with WPS Office to continue editing and collaborating without needing to resolve your Office 365 login issues first.
Frequently Asked Questions
Why does Microsoft Authenticator keep asking me to set it up when I sign in?
This happens due to a synchronization issue with the Microsoft 365 'Registration campaign' feature. The system gets stuck in a loop trying to force the Authenticator app setup on desktop browsers, even if you try to choose an alternative authentication method.
How can I bypass the Microsoft Authenticator setup loop?
You can bypass the loop by signing into the Microsoft Entra admin center from a device where your session is still active (like a mobile phone) and changing the state of the Microsoft Authenticator registration campaign to 'Disabled'.
What should I do if I am completely locked out of all devices?
If you are an administrator and cannot access your account from any device, you must contact Microsoft 365 business technical support by phone. They can verify your identity and reset your tenant's authentication registration from the backend.
