How to Fix Power BI Unexpectedly Requiring Microsoft Authenticator Registration
Question details
Users are unexpectedly prompted to register the Microsoft Authenticator app when signing in to Power BI, even though multifactor authentication is disabled in the admin center.
- Product
- Power BI / Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- Signing in to Power BI or related Microsoft 365 services.
- Observed behavior
- The system forces a prompt to register Microsoft Authenticator due to a background MFA registration campaign, overriding the standard Microsoft 365 admin center settings.
Ensure you have Global Administrator or Authentication Administrator privileges in your Microsoft Entra ID (formerly Azure AD) tenant to modify organization-wide registration campaigns.
Disable the Microsoft Authenticator Registration Campaign
Turn off the automated registration campaign in Microsoft Entra ID to stop forcing users to set up the Authenticator app during login.
Microsoft frequently runs MFA registration campaigns to improve organizational security. This campaign can override legacy per-user settings in the Microsoft 365 admin center, meaning you must adjust the policy directly within the Microsoft Entra admin center.
Navigate to the Microsoft Entra admin center and log in with your administrator credentials.
In the left-hand navigation pane, expand 'Protection' and click on 'Authentication methods'.
Select 'Registration campaign' from the menu. Click 'Edit' at the top of the settings page.
Change the State dropdown to 'Disabled'. Alternatively, leave it enabled but add the affected users or groups to the 'Excluded' list, then click 'Save'.
Simplify Your Workflow with WPS Office
While troubleshooting complex Microsoft 365 admin policies and Power BI authentication loops, consider switching to WPS Office for your daily document tasks. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office, free from heavy administrative overhead.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install WPS Office: Run the downloaded installer file and follow the on-screen prompts to complete the setup.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing Excel datasets or Word reports with full compatibility.
Frequently Asked Questions
Why does Power BI ask for the Authenticator app when MFA is disabled?
Microsoft occasionally pushes registration campaigns via Microsoft Entra ID to encourage modern authentication methods. These campaigns run independently of the legacy per-user MFA settings located in the Microsoft 365 admin center.
Can I exempt specific users from the Microsoft Authenticator prompt without disabling the entire campaign?
Yes. In the Microsoft Entra admin center under 'Protection' > 'Authentication methods' > 'Registration campaign', administrators can add specific users or groups to an exclusion list rather than disabling the campaign globally.
What are Security Defaults and how do they affect Power BI logins?
Security Defaults are baseline security settings in Microsoft Entra ID that mandate multifactor authentication for all users. If enabled, users will be required to register for Microsoft Authenticator regardless of your registration campaign or legacy MFA settings.
