A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Multiple unexpected sign-in prompts usually indicate either repeated sign-in attempts on the account or a misconfigured/overused authentication flow.
Take these steps:
- Check for repeated/blocked sign-in attempts
Microsoft Entra multifactor authentication can detect unusual activity like repeated sign-in attempts and may temporarily block or challenge sign-ins more often. If there have been many attempts (for example, from apps, old devices, or a malicious actor), this can cause frequent prompts.- If many attempts were made by mistake, wait for the lockout period to clear and avoid repeatedly retrying.
- If there might be malicious activity, contact the organization’s IT administrator and ask them to review Microsoft Entra sign-in logs and MFA configuration.
- Review recent sign-in activity
Use the My sign-ins experience to see what is triggering the prompts:- Go to the Review recent activity page and search for Unsuccessful sign-ins to see if there are repeated failures.
- Confirm or deny any unusual activity flagged on the My sign-ins page.
- On Android, open Microsoft Authenticator → select the work or school account → Recent account activity and verify each sign-in. If any are unfamiliar, change the account password again and keep MFA enabled.
- Harden the account if unsuccessful sign-ins appear
If there are many unsuccessful sign-ins, it may be someone trying to guess the password:- Ensure multi-factor authentication is enabled and correctly configured.
- If you see entries where Session activity shows “Additional verification failed, invalid code,” it means the password was correct but MFA failed. In that case, change the password immediately and update security settings on the Security info page.
- Check Authenticator and device conditions
If prompts fail with messages like “Authentication did not complete,” this can cause repeated attempts:- Make sure the Microsoft Authenticator app is unlocked when responding.
- Ensure notifications are enabled and not silent, so prompts can be completed quickly instead of timing out and retriggering.
- Confirm the app is updated to the latest version and that the device has a stable internet connection and correct date/time.
- Coordinate with IT/admin
If this is a work or school account, ask the IT administrator to:- Review sign-in logs for repeated or suspicious attempts.
- Confirm MFA policies and conditional access rules are not causing excessive prompts.
- Help reset MFA methods if needed and verify that only expected devices and apps are configured.
If, after these steps, frequent prompts continue and sign-in logs show ongoing suspicious attempts, treat it as a potential security incident and work with the organization’s security/IT team to investigate further.
References: