How to Fix Microsoft 365 Admin Authenticator Sign-In Loop
Question details
The user is unable to sign into their Microsoft 365 administrator account because the login process requires multifactor authentication approval from an Authenticator app that has not been configured.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to log into a Microsoft 365 Global Administrator account.
- Observed behavior
- The sign-in process is stuck in a loop, continuously prompting for MFA approval from an unconfigured app and blocking account access.
Ensure you have the contact information of other Global Administrators in your organization, or gather your organization's tenant details (domain name, subscription info) before reaching out to Microsoft Support.
Ask Another Global Administrator to Reset MFA Settings
The fastest way to regain access is to have another active Global Administrator in your organization reset your multifactor authentication configuration.
If your organization has multiple Global Administrators, they have the necessary permissions to access the Entra admin center and reset your authentication methods. This will break the loop and allow you to set up the Authenticator app from scratch.
Reach out to another Global Administrator within your Microsoft 365 tenant and explain that you are locked out.
Ask the admin to log into the Microsoft Entra admin center, go to Identity, and navigate to Users > All users.
Have them search for your specific administrator account and click on it to open your profile.
Under 'Authentication methods', ask the admin to select 'Require re-register MFA' and save the changes.
Sign in to your account again. You will be prompted to set up multifactor authentication as if it were your first time. Follow the on-screen steps to properly link the Microsoft Authenticator app.
Contact Microsoft Data Protection Team for Account Recovery
If you are the only Global Administrator and cannot bypass the loop, you must contact Microsoft Support directly for backend account recovery.
Avoid Complex Login Loops with WPS Office
While enterprise security is critical, simple document editing shouldn't require complex admin setups and frustrating MFA lockouts. WPS Office provides a lightweight, hassle-free alternative to Microsoft Office. It offers seamless compatibility with Word, Excel, and PowerPoint files without intricate tenant configurations, allowing you to focus on your work immediately.
- 1. Download and Install WPS Office: Visit the official WPS website, download the free application, and run the quick installer on your PC or Mac.
- 2. Skip Complex Setups: Launch the software immediately. You can create a free account with your standard email without dealing with enterprise backend administration.
- 3. Open Office Files Instantly: Drag and drop your existing Microsoft Office files into WPS Office to start editing them with full formatting preserved.
Frequently Asked Questions
Why am I stuck in a Microsoft Authenticator loop if I never set it up?
This typically occurs when 'Security Defaults' are enabled in your Microsoft 365 tenant. The system mandates MFA for all admins. If the initial grace period to set up the app expires before you configure it, the system will demand approval from a non-existent app, creating a loop.
Can I bypass the Authenticator app as a Global Administrator?
No. Global Administrators are strictly required to use multifactor authentication by default to protect the tenant. You can reset the requirement so you can register a new authentication method, but you cannot permanently bypass MFA for admin roles.
Will the Microsoft Community be able to fix my admin MFA loop?
No. Microsoft Community moderators and volunteers do not have backend access to change your tenant's authentication settings. Only another admin within your organization or the official Microsoft Data Protection Team can resolve this issue.
