'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Fix Microsoft Entra MFA Error 399287 During SMS Verification
Question details
A Microsoft 365 administrator is unable to sign in to the admin center due to an SMS verification failure, preventing essential tasks like license assignments.
- Product
- Microsoft Entra
- Device & OS
- not provided
- Scenario
- Attempting to access the Microsoft 365 or Microsoft Entra admin center using SMS-based multifactor authentication.
- Observed behavior
- The sign-in process fails with Error 399287 during SMS verification, completely locking the administrator out of the tenant environment.
Determine whether you are the only global administrator for your Microsoft 365 tenant, as the required recovery steps depend entirely on whether another administrator can log in to adjust your account settings.
Update Authentication Methods via Another Administrator
Use this solution if your organization has another active administrator who can successfully sign in and modify your account settings.
If you are not the sole administrator, a colleague with User Administrator or Global Administrator privileges can bypass the blocked SMS method by manually adding a different authentication method to your profile.
Have the alternative administrator sign in to the Microsoft Entra admin center using their active credentials.
Go to 'Entra ID' from the main dashboard and click on 'Users' in the left-hand navigation pane.
Search for and select the administrator account that is currently experiencing Error 399287.
Click on 'Authentication methods' and add an alternative option, such as the Microsoft Authenticator app, then save the changes so the locked user can sign in.
Contact Microsoft Support for Data Protection Recovery
Use this solution if you are the sole global administrator for the tenant and are completely locked out due to the SMS block.
Submit a Support Ticket via a Temporary Trial Tenant
Use this workaround if you cannot reach Microsoft Support by phone and need to open an official support ticket online.
Maintain Productivity with WPS Office During Admin Lockouts
While waiting for Microsoft Support to restore your administrator access, you don't have to halt your daily tasks. WPS Office is a free, lightweight alternative that allows you to securely edit your essential files locally without relying on cloud authentication.
- 1. Download WPS Office: Visit the official WPS Office website to download the free installation package for your PC or Mac.
- 2. Install the Software: Run the installer and follow the simple on-screen instructions to complete the setup in under a minute.
- 3. Open Your Microsoft Documents: Launch WPS Office and directly open your existing Word, Excel, or PowerPoint files to continue working immediately.
Frequently Asked Questions
Why am I receiving Microsoft Entra Error 399287 during sign-in?
This error generally happens when the phone number registered for SMS or voice verification is flagged and temporarily blocked by Microsoft's phone reputation system due to repeated failed login attempts or perceived unusual activity.
Can I bypass the SMS MFA requirement if I am the only administrator?
No. For security reasons, Microsoft does not allow users or forum moderators to bypass MFA policies. If you are a sole administrator and are locked out, you must contact Microsoft's Data Protection team to verify your identity and restore access.
How do I change my MFA method if my SMS verification is blocked?
If another administrator in your organization has access, they can log into the Microsoft Entra admin center, navigate to your user profile's 'Authentication methods' section, and add an alternative verification method like the Microsoft Authenticator app.
