'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Why Microsoft Authenticator Uses Number Matching or Selection
Question details
The user wants to understand why Microsoft Authenticator displays different prompts, such as number matching or number selection, during the sign-in process.
- Product
- Microsoft Authenticator
- Device & OS
- not provided
- Scenario
- Signing into Microsoft 365 services with Multi-Factor Authentication (MFA) enabled.
- Observed behavior
- The authenticator app displays varying verification prompts, such as number matching or selection, depending on the specific service or tenant configuration.
Ensure you have the latest version of the Microsoft Authenticator app installed on your mobile device, as outdated versions may not support new authentication methods.
Identify and Respond to Authenticator Prompts Appropriately
Different Microsoft 365 services and admin configurations trigger different types of MFA prompts to enhance account security.
Number matching is a security upgrade for traditional second-factor notifications, designed to prevent accidental approvals during MFA fatigue attacks. The exact prompt you receive depends on your organization's tenant configuration, the specific Microsoft 365 service being accessed, and the authentication method deployed by your IT administrator.
Check the specific Microsoft 365 subscription, application, or website you are trying to access to understand the login context.
When a two-digit number appears on your computer screen during sign-in, open the Microsoft Authenticator app on your phone and manually type or select that exact number.
If you receive a number matching or selection prompt on your phone without initiating a login yourself, tap 'Deny' immediately, as this indicates an unauthorized access attempt.
If you experience looping prompts or login failures, take a screenshot of the error. Ensure you obscure any sensitive account details or email addresses before sharing it with your IT support team.
Experience Hassle-Free Productivity with WPS Office
While Microsoft 365 requires strict MFA configurations for enterprise access, you can enjoy a lightweight, seamless, and free alternative for your personal or everyday document needs with WPS Office. It provides powerful tools for creating documents, spreadsheets, and presentations without complex authentication hurdles.
- 1. Download the installer: Visit the official WPS website and click the free download button.
- 2. Install the software: Run the setup file and follow the on-screen instructions to install WPS Office on your device.
- 3. Open your files: Launch WPS Office and directly open any existing Microsoft Word, Excel, or PowerPoint files with perfect compatibility.
Frequently Asked Questions
What is number matching in Microsoft Authenticator?
Number matching is a security feature that requires you to enter a specific two-digit number displayed on your sign-in screen into the Authenticator app to approve a login attempt. This prevents users from accidentally approving fraudulent sign-in requests.
Why did my MFA prompt suddenly change to number matching?
Microsoft has made number matching the default behavior for Authenticator push notifications across all tenants to improve security. Your IT administrator manages these tenant settings in the Microsoft Entra ID admin center.
What should I do if I receive a number matching prompt I didn't initiate?
Immediately deny the request in the Microsoft Authenticator app. Do not guess or enter any numbers. An unexpected prompt indicates someone else has your password and is trying to access your account.
Does number matching work on older devices or smartwatches?
Number matching is not supported on Apple Watch or Android wearable devices. You must use the Microsoft Authenticator app on your smartphone or tablet to complete the number matching verification process.
