Fix SharePoint Sign-In Fails After Enabling Two-Step Verification
Question details
Users experience sign-in failures and rejected Microsoft Authenticator codes when attempting to access shared SharePoint content after enabling two-step verification.

- Product
- SharePoint
- Device & OS
- not provided
- Scenario
- Accessing shared SharePoint content as a guest user with multi-factor authentication (MFA) enabled.
- Observed behavior
- The Microsoft Authenticator code is continuously rejected, preventing the guest user from successfully signing into the shared SharePoint environment.
Ensure that your mobile device's date and time are set to update automatically, as time synchronization discrepancies can cause Microsoft Authenticator codes to be incorrectly rejected.
Verify Guest Account and Authenticator Registration
Confirm that you are using the correct guest account and corresponding Authenticator profile to access the shared content.
A common cause of rejected authentication codes is attempting to log in with a different Microsoft account or selecting the wrong profile within the Microsoft Authenticator app.
Locate the original SharePoint invitation email and verify the exact guest account email address that received the invitation.
Open the Microsoft Authenticator app on your mobile device and locate the specific profile that matches the guest account address from the invitation.
Input the 6-digit code generated by the correct profile into the SharePoint sign-in prompt before the timer expires.

Request MFA Reset from the Host Organization
Ask the IT administrator of the organization that owns the SharePoint content to reset your guest authentication methods.
Try WPS Office for Seamless Document Collaboration
While you wait for your host organization's IT department to resolve your SharePoint MFA and Microsoft Authenticator issues, you can maintain productivity with WPS Office. It is a highly compatible, free alternative that allows you to easily share and collaborate on documents without complex multi-factor authentication setups.
- 1. Download and install WPS Office: Visit the official WPS website and download the free software suite for your operating system.
- 2. Open your Office files: Launch WPS Office and easily open any existing .docx, .xlsx, or .pptx files you need to work on.
- 3. Share via WPS Cloud: Click the 'Share' button in the top right corner to generate a secure document link and collaborate with your team instantly.

Frequently Asked Questions
Why is my Microsoft Authenticator code continuously rejected for SharePoint?
This usually happens due to a time-synchronization issue on your mobile device, using the wrong Authenticator profile for the guest account, or a stale MFA registration on the host organization's tenant.
How do I fix a time-synchronization problem in the Authenticator app?
If you are using an Android device, open the Microsoft Authenticator app, navigate to Settings, and select 'Time correction for codes' to sync the app with Microsoft's servers. On iOS, ensure your device Settings > General > Date & Time is set to 'Set Automatically'.
Can I bypass two-step verification as a guest user on SharePoint?
No, if the organization hosting the SharePoint content has configured Conditional Access policies requiring MFA for guest users, you cannot bypass it. You must complete the two-step verification process to gain access.
What should the host administrator do if my guest MFA fails?
The administrator should log into the Microsoft Entra admin center, navigate to Users > All users, find your guest profile, click 'Authentication methods', and select 'Require re-register MFA' to let you set up the app again.




