Admin User Keeps Getting MFA Re-Registration Prompt

Question

Admin User Keeps Getting MFA Re-Registration Prompt

pallavi.m 0

We’re experiencing an issue where, whenever we log in using the admin account, the system repeatedly prompts for MFA registration. We’ve verified that no conditional access policies are applied, and the Registration Campaign is disabled. What else can we check to ensure MFA is remembered? Since re-registration keeps occurring, it creates a security risk because anyone could potentially bypass MFA and sign in.

VEMULA SRISAI 13,985 Reputation points Microsoft External Staff Moderator

2025-11-26T06:24:53.7266667+00:00
Hello pallavi.m ,

Thanks for the details. Repeated MFA registration typically occurs when another enforcement mechanism is active even if Conditional Access and Registration Campaign are disabled. Please review:

Per‑user MFA – In Users → Multi‑Factor Authentication, ensure the admin account is Disabled (not Enforced).

Security defaults – Confirm they’re Off under Entra ID → Properties → Manage security defaults.

Authentication methods / SSPR – Policy changes or removed methods can force re‑registration.

Device registration / risk policies – These can silently require MFA during sign‑in or provisioning.

If the loop persists, use Sign‑in diagnostics to check if “MFA from other requirement” or “proofup” appears, then issue a Temporary Access Pass (TAP) to perform a clean re‑registration (Authenticator/FIDO2) and remove stale methods at https://aka.ms/mysecurityinfo.

If the issue still persists after these steps: To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following in a private message only (do not post publicly):

Contact phone number (including country code)

Email address (affected account)

Country

Time zone

Tenant ID

Azure subscription ID

Your answer

VEMULA SRISAI 13,985 Reputation points Microsoft External Staff Moderator

2025-11-26T06:24:53.7266667+00:00

Hello pallavi.m ,

Thanks for the details. Repeated MFA registration typically occurs when another enforcement mechanism is active even if Conditional Access and Registration Campaign are disabled. Please review:

Per‑user MFA – In Users → Multi‑Factor Authentication, ensure the admin account is Disabled (not Enforced).

Security defaults – Confirm they’re Off under Entra ID → Properties → Manage security defaults.

Authentication methods / SSPR – Policy changes or removed methods can force re‑registration.

Device registration / risk policies – These can silently require MFA during sign‑in or provisioning.

If the loop persists, use Sign‑in diagnostics to check if “MFA from other requirement” or “proofup” appears, then issue a Temporary Access Pass (TAP) to perform a clean re‑registration (Authenticator/FIDO2) and remove stale methods at https://aka.ms/mysecurityinfo.

If the issue still persists after these steps: To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following in a private message only (do not post publicly):

Contact phone number (including country code)

Email address (affected account)

Country

Time zone

Tenant ID

Azure subscription ID