MFA & Verification Issues

Fix Unable to Sign In to Azure Portal Because of Authenticator MFA

Chanuka Geekiyanage Oct 9, 2026 869 views

Question details

The user is unable to log in to the Azure portal because the system continuously prompts for a Microsoft Authenticator app approval, ignoring disabled personal verification settings.

How to Fix Azure Portal Sign-In Blocked by Authenticator MFA

Product: Azure Portal
Device & OS: not provided
Scenario: Attempting to sign in to the Azure portal to manage services or accounts.
Observed behavior: The sign-in process is halted at the multifactor authentication step, demanding Microsoft Authenticator approval that the user cannot provide, effectively blocking access.

Before you start

Ensure you have access to any backup email addresses or phone numbers associated with your Microsoft account, and check if you are logging into a personal or an organizational (work/school) directory.

Solution 1Recommended

Use an Alternative Sign-in Method

Bypass the Authenticator app prompt by selecting a backup verification method that is already registered to your Microsoft account.

If you have lost access to your Authenticator app but previously set up a backup phone number or email, you can use these to receive your security code and regain access.

Select alternative login options

On the sign-in screen that prompts for the Authenticator app, click on the link that says 'Other ways to sign in' or 'I don't have access to my Microsoft Authenticator app'.

Choose a backup method

Select an available verification method from the list, such as receiving a text message (SMS) to your phone or a code to your alternate email address.

Enter the verification code

Retrieve the code from your phone or email, enter it into the Azure portal sign-in screen, and proceed to log in.

Reset your authentication methods

Once you are successfully logged in, immediately navigate to your account's Security Info settings to remove the old Authenticator app and register a new one.

Update Security Info: Always keep at least two verification methods active in your account settings to prevent future lockouts.

Solution 2

Contact Your Tenant Administrator

For work or school accounts, tenant-enforced MFA policies require an IT administrator to manually reset your authentication methods.

Free Microsoft Office alternative

Experience a Hassle-Free Office Suite with WPS Office

If strict tenant-enforced MFA and complex Microsoft account lockouts are disrupting your workflow, consider using WPS Office for your document needs. It offers a seamless, offline-capable environment without the strict organizational cloud lockouts.

1. Download WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
2. Install the Suite: Run the setup file and follow the quick installation wizard to get started in seconds.
3. Open Your Office Files: Launch WPS Office to open, edit, and save your existing Microsoft Office documents locally without requiring complex cloud logins.

Work on local documents independently without being blocked by organization-enforced MFA.Seamless format compatibility with Microsoft Word, Excel, and PowerPoint files (.docx, .xlsx, .pptx).Lightweight installation with a familiar user interface for immediate, hassle-free productivity.

microsoft office alternative - wps office

Frequently Asked Questions

Why does the Azure portal ask for MFA when my personal two-step verification is disabled?

If you are accessing resources tied to an organization, the tenant administrator may have enforced multifactor authentication at the directory level. This organizational policy overrides your personal account security settings.

Can I remove the Microsoft Authenticator requirement myself?

If it is a personal Microsoft account, you can change your security methods in your account dashboard. However, for work or school accounts, you cannot bypass or remove organization-enforced MFA; you must contact your IT administrator.

What should I do if I lost the phone with my Microsoft Authenticator app?

On the sign-in screen, click 'Other ways to sign in' and choose a backup method like SMS or an alternate email. If no backup methods are available and it is a work account, contact your organization's support desk to clear your MFA session.

Will clearing my browser cache fix the Authenticator loop?

No, clearing the browser cache will not disable the MFA requirement. The prompt is triggered by server-side security policies configured for your Microsoft or Azure account.

Login & Account Issues