Fix Unable to Access Azure Tenant with Microsoft Authenticator
Question details
The user is locked out of an Azure tenant account because the required Microsoft Authenticator code is unavailable, despite having an email address and phone number registered.

- Product
- Microsoft Azure
- Device & OS
- not provided
- Scenario
- Attempting to sign in to a Microsoft Azure tenant account.
- Observed behavior
- The sign-in screen exclusively prompts for a Microsoft Authenticator code, offering no fallback options to use the registered email or phone number.
Before seeking assistance, prepare your Azure tenant domain name and note any specific error codes. Never share passwords, recovery codes, or authentication secrets in public forums or support tickets.
Contact Your Azure Administrator to Reset MFA
If you are a standard user, your organization's Azure administrator must reset your Multi-Factor Authentication (MFA) settings to restore access.
Azure tenant security defaults often mandate the Microsoft Authenticator app, overriding alternative verification methods like email or SMS. Only an administrator can bypass or reset this requirement.
Reach out to your organization's IT helpdesk or the Global Administrator who manages your Azure/Microsoft 365 environment.
Ask the administrator to navigate to the Azure portal, locate your user profile, and select 'Require re-register MFA' or revoke existing MFA sessions.
Once reset, sign in with your username and password. You will be prompted to set up the Microsoft Authenticator app from scratch.

Post in the Azure Microsoft Q&A Forum
If you are the tenant administrator and are locked out, you need to escalate the issue directly to Microsoft Support engineers.
Experience Hassle-Free Productivity with WPS Office
Dealing with complex enterprise authentication loops can disrupt your workflow. If you need a reliable, lightweight, and easy-to-use alternative to Microsoft Office, WPS Office lets you focus on your documents without enterprise-level sign-in headaches.
- 1. Download the installer: Visit the official WPS website and download the free version for your operating system.
- 2. Install WPS Office: Run the lightweight installer and complete the setup in minutes.
- 3. Open your files: Double-click your existing Microsoft Office files to edit them instantly without complex authentication barriers.

Frequently Asked Questions
Why does Azure only ask for Microsoft Authenticator when I have a phone and email registered?
Azure's Security Defaults or Conditional Access policies set by your organization often prioritize or mandate the Microsoft Authenticator app for push notifications, disabling basic SMS or email verification for higher security.
Can I bypass the Microsoft Authenticator requirement if I lose my phone?
No, you cannot bypass it yourself if it is the only enforced authentication method. You must contact your Azure tenant administrator to trigger a re-registration of your MFA methods.
What if I am the only Global Administrator and I am locked out?
If you are the sole administrator and locked out of your tenant, you will need to contact the Microsoft Data Protection team directly or post in the Microsoft Q&A forum to undergo identity verification and regain access.




