Microsoft Authenticator App Disconnected

The sign-in loop happens when Microsoft Entra multifactor authentication (MFA) cannot successfully verify the account with the current method (Authenticator app, code, etc.). Use these steps depending on what is available on the account.

1. If there is another MFA method configured

• At the “Approve sign-in request” screen, choose I can’t use my Microsoft Authenticator app right now or Use a different verification option (wording can vary).
• Select another method that is already registered (SMS, call, email code, security key, etc.).
• After signing in, go to the Security info page and verify/update methods:
  • Confirm phone number and email are correct.
  • Add at least one backup method (SMS, call, or email) in addition to the Authenticator app.
  • If the Authenticator entry looks wrong or unused, remove it and re-add the app.

2. If no alternative MFA method works and sign-in is blocked

• Repeated failed attempts or unusual activity can cause Microsoft Entra MFA to temporarily block verification attempts.
• In this case:
  • Wait before trying again, and avoid repeated or excessive attempts.
  • If this is a work or school (business) account, contact the organization’s IT administrator and ask them to:
    • Open Microsoft Entra admin center → Users → All users → select the user → Authentication methods.
    • Use Require re-register multifactor authentication to reset MFA so setup can be done again on the Authenticator app.
  • If already tried multiple times and still cannot sign in, ask the IT admin to check Microsoft Entra sign-in logs for blocked or suspicious activity and to confirm MFA configuration.

3. If the device or Authenticator setup is lost or broken and there is no admin

• For a business tenant where the affected user is the only administrator and has no working MFA method, recovery must be done by Microsoft’s Data Protection team.
• Call the regional number from Customer service phone numbers - Microsoft Support and request a ticket with the Data Protection team to reset the admin’s MFA. Be prepared to verify identity and tenant ownership.

4. Handling unrequested or confusing codes/prompts

• If verification codes or prompts appear that were not requested, do not approve or use them. This can indicate someone else is trying to access the account.
• For unrequested codes, ignore them; without the correct response, the account remains safe.

If none of the above is possible (no other MFA method, no admin, and no access to support), access cannot be restored without an administrator or Microsoft support resetting MFA on the back end.

References:

• Common problems with two-step verification for a work or school account
• Using Outlook mobile to sign in
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A