MFA Security Issues

How to Fix Microsoft Admin Center MFA Sign-In Loop

Maira Mehtab Sep 20, 2026 868 views

Question details

The user is trapped in an infinite sign-in loop triggered by a 'More action required' prompt when trying to log into the Microsoft Admin Center using a TOTP authenticator app.

Product: Microsoft Admin Center / Entra ID
Device & OS: not provided
Scenario: Attempting to log into the Microsoft Admin Center using an authenticator app (KeePass) as the primary MFA method.
Observed behavior: While SMS authentication succeeds, selecting the authenticator app triggers a 'More action required' message, creating an infinite sign-in loop that prevents access.

Before you start

Before beginning, check if you can still log in using your alternative MFA method (such as SMS) or ensure that another Global Administrator in your organization has access to the tenant.

Solution 1Recommended

Request Assistance from Microsoft Entra ID Support

Because the sign-in loop is an anomaly with Entra ID multifactor authentication registration, specialized intervention from Microsoft or the community is highly recommended.

Sign-in loops often occur when Entra ID expects a security registration update but fails to process the TOTP app setup (like KeePass) correctly. Since this is a backend authentication flow issue, Microsoft specialists can investigate the logs to clear the loop.

Log in with an alternative method

Navigate to the Microsoft Admin Center login page. When prompted for MFA, choose 'Sign in another way' and select your SMS authentication method to gain entry.

Visit the Entra ID Community or Azure Portal

If you cannot bypass the loop, navigate to the Microsoft Entra ID Q&A community forums or have an alternate admin log into the Azure Portal.

Open a support ticket

Submit a support request detailing the 'More action required' error and explicitly mention that the infinite loop occurs when using a TOTP authenticator app.

Admin Access Required: If you are the sole administrator and are completely locked out, you may need to contact the Microsoft Data Protection team directly to verify your identity and unlock the tenant.

Solution 2

Clear Browser Cache and Use Incognito Mode

Use this method to rule out corrupted browser session tokens that might be falsely triggering the 'More action required' loop.

Free Microsoft Office alternative

Discover a Lightweight and Free Office Suite with WPS Office

While troubleshooting complex Microsoft Admin Center and Entra ID security issues, you might also be looking for a more accessible and cost-effective office suite for your daily document tasks. WPS Office provides a fully compatible, lightweight, and free alternative to Microsoft Office, ensuring seamless productivity without heavy administrative overhead.

1. Visit the website: Go to the official WPS Office website.
2. Download the installer: Click 'Download WPS Office Free' to get the installer for your specific operating system.
3. Install and launch: Run the installation file, follow the prompts, and open WPS Office to view and edit your Microsoft Office documents instantly.

Fully compatible with Microsoft Word, Excel, and PowerPoint file formats.Avoids complex enterprise authentication loops for basic offline document editing.Lightweight design that loads quickly and requires minimal system resources.Free to use with an intuitive, familiar interface for seamless migration.

microsoft office alternative - wps office

Frequently Asked Questions

Why does Microsoft Admin Center say 'More action required'?

This message usually indicates that your organization has enabled Security Defaults or Conditional Access policies that require you to register additional security information, such as setting up an authenticator app, before granting access.

How can I bypass the MFA sign-in loop if I am locked out?

If you are entirely locked out, another Global Administrator must log into the Azure portal and require you to re-register your MFA methods. If you are the only admin, you must contact Microsoft Data Protection support.

Does KeePass TOTP work with Microsoft Entra ID MFA?

Yes, KeePass can generate TOTP codes for Microsoft accounts. However, configuration errors or time sync issues can occasionally cause authentication failures or sign-in loops compared to using the official Microsoft Authenticator app.

Can I temporarily disable MFA to fix the loop?

If another admin has access, they can temporarily exclude your account from the Conditional Access policy or Security Defaults enforcing MFA. This allows you to sign in and properly reset your authenticator app settings.

Microsoft Office Security Issues