A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Follow these steps to troubleshoot and then involve the right admin/support contact:
- Check whether notifications are going to another device
- If Microsoft Authenticator is still installed on an older phone, the Azure sign-in notification may be sent there instead of the current phone.
- If possible, open Authenticator on the old device and approve the sign-in.
- Then remove Authenticator from the old device and clean up old devices in your account security settings so future prompts go to the correct phone.
- Verify Authenticator notifications on the phone
- Confirm that other Microsoft Authenticator notifications work for this same account (not just other apps).
- Make sure the phone is not in Do Not Disturb/Quiet mode.
- In the phone’s Settings, ensure notifications are allowed for Microsoft Authenticator (sound/vibration as needed).
- Check that the device has working internet (try switching between Wi‑Fi and mobile data).
- Fix common Authenticator issues
- Ensure the Microsoft Authenticator app is unlocked when trying to approve.
- Make sure the app is updated to the latest version.
- Set the device date and time to automatic and correct, then restart the device.
- Try alternative verification options (if available)
- On the Azure sign-in prompt, choose Other verification options (if shown) and try SMS or voice call.
- If text/voice codes also fail to arrive, a global admin should verify the phone numbers in the user’s Microsoft Entra ID settings and confirm the account is not blocked for sign-in.
- Who to contact to reset/review the Azure user/MFA
- For a work/school (organization) account: contact the organization’s Microsoft Entra/Azure global administrator or IT helpdesk and ask them to:
- Open Microsoft Entra admin center → Identity → Users → All users → [your user] → Authentication methods.
- Use Require re-register MFA so that MFA methods can be set up again on the device.
- If locked out and there is no other global admin able to help (single-admin tenant), a support ticket with Microsoft Support/Data Protection team is required so they can verify identity and reset MFA on the tenant.
- For a work/school (organization) account: contact the organization’s Microsoft Entra/Azure global administrator or IT helpdesk and ask them to:
If, after these checks, notifications still do not arrive only for Azure Portal sign-ins, the tenant admin resetting MFA (Require re-register MFA) is the primary remediation path.
References:
- Microsoft Authenticator FAQs
- Troubleshoot problems with Microsoft Authenticator
- Authentication did not complete
- You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
- Reset Personal Azure MFA - Microsoft Q&A
- I need to reset my mfa methods - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Azure has blocked myphone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A